CWE-695: Use of Low-Level Functionality
Description
The product uses low-level functionality that is explicitly prohibited by the framework or specification under which the product is supposed to operate.
The use of low-level functionality can violate the specification in unexpected ways that effectively disable built-in protection mechanisms, introduce exploitable inconsistencies, or otherwise expose the functionality to attack.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Other
Other
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-111Direct Use of Unsafe JNI
- CWE-245J2EE Bad Practices: Direct Management of Connections
- CWE-246J2EE Bad Practices: Direct Use of Sockets
- CWE-383J2EE Bad Practices: Direct Use of Threads
- CWE-574EJB Bad Practices: Use of Synchronization Primitives
- CWE-575EJB Bad Practices: Use of AWT Swing
- CWE-576EJB Bad Practices: Use of Java I/O