Use of Low-Level Functionality

Opis

The product uses low-level functionality that is explicitly prohibited by the framework or specification under which the product is supposed to operate.

The use of low-level functionality can violate the specification in unexpected ways that effectively disable built-in protection mechanisms, introduce exploitable inconsistencies, or otherwise expose the functionality to attack.

Skutki

• Other

  Other

Słabość nadrzędna

• CWE-573 Improper Following of Specification by Caller

Słabości podrzędne

• CWE-111 Direct Use of Unsafe JNI
• CWE-245 J2EE Bad Practices: Direct Management of Connections
• CWE-246 J2EE Bad Practices: Direct Use of Sockets
• CWE-383 J2EE Bad Practices: Direct Use of Threads
• CWE-574 EJB Bad Practices: Use of Synchronization Primitives
• CWE-575 EJB Bad Practices: Use of AWT Swing
• CWE-576 EJB Bad Practices: Use of Java I/O

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific