Skip to content
OpenAdvisories

Weakness (CWE)

CWE-547: Use of Hard-coded, Security-relevant Constants

Base Draft

The product uses hard-coded constants instead of symbolic names for security-critical values, which increases the likelihood of mistakes during code maintenance or security policy change.

How to prevent it (1 mitigation)

  1. Implementation

    Avoid using hard-coded constants. Configuration files offer a more flexible solution.

Source: MITRE CWE-547

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.