CWE-589 — Call to Non-ubiquitous API
CWE-589: Call to Non-ubiquitous API
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product uses an API function that does not exist on all versions of the target platform. This could cause portability problems or inconsistencies that allow denial of service or other consequences.
Some functions that offer security features supported by the OS are not available on all versions of the OS in common use. Likewise, functions are often deprecated or made obsolete for security reasons and should not be used.
Common consequences
- Other: Quality Degradation
Mitigations
Implementation — Always test your code on any platform on which it is targeted to run on.
Testing — Test your code on the newest and oldest platform on which it is targeted to run on.
Testing — Develop a system to test for API functions that are not portable.
References
- CWE page: https://cwe.mitre.org/data/definitions/589.html
- CWE list: https://cwe.mitre.org/data/index.html