CWE-477 — Use of Obsolete Function
CWE-477: Use of Obsolete Function
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
As programming languages evolve, functions occasionally become obsolete due to: Advances in the language Improved understanding of how operations should be performed effectively and securely Changes in the conventions that govern certain operations Functions that are removed are usually replaced by newer counterparts that perform the same task in some different and hopefully improved way.
Common consequences
- Other: Quality Degradation
Mitigations
Implementation — Refer to the documentation for the obsolete function in order to determine why it is deprecated or obsolete and to learn about alternative ways to achieve the same functionality.
Requirements — Consider seriously the security implications of using an obsolete function. Consider using alternate functions.
References
- CWE page: https://cwe.mitre.org/data/definitions/477.html
- CWE list: https://cwe.mitre.org/data/index.html