CWE-477 - Use of Obsolete Function

Read Time:27 Second

Description

The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

Modes of Introduction:

– Implementation

Related Weaknesses

CWE-710

Consequences

Other: Quality Degradation

Potential Mitigations

Phase: Implementation

Description:

Refer to the documentation for the obsolete function in order to determine why it is deprecated or obsolete and to learn about alternative ways to achieve the same functionality.

Phase: Requirements

Description:

Consider seriously the security implications of using an obsolete function. Consider using alternate functions.

CVE References

InCWE- 477, Use of Obsolete Function

The Most Dangerous Vulnerabilities in Apache Tomcat and How to Protect Against Them

Apache Tomcat is an open-source web server and servlet container that is widely used in enterprise environments to run Java...

rocco

February 19, 2023February 19, 2023

ZDI-CAN-18333: A Critical Zero-Day Vulnerability in Microsoft Windows

Zero-day vulnerabilities are a serious threat to cybersecurity, as they can be exploited by malicious actors to gain unauthorized access...

rocco

February 19, 2023February 19, 2023

CWE-669 – Incorrect Resource Transfer Between Spheres

Description The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere,...

rocco

May 26, 2022