CWE-448: Obsolete Feature in UI

BaseDraft

A UI function is obsolete and the product does not warn the user.

View on MITRE
Back to CWE Lookup

Technical Details

Structure
Simple

Applicable To

Languages
Not Language-Specific
Platforms

Frequently Asked Questions

What is CWE-448: Obsolete Feature in UI?+

CWE-448: Obsolete Feature in UI is a Common Weakness Enumeration (CWE) entry maintained by MITRE. A UI function is obsolete and the product does not warn the user.

What are the security consequences of Obsolete Feature in UI?+

If exploited, CWE-448 (Obsolete Feature in UI) it can compromise Other, leading to outcomes such as Quality Degradation and Varies by Context.

How do you prevent or mitigate Obsolete Feature in UI?+

Recommended mitigations for CWE-448 include: Remove the obsolete feature from the UI. Warn the user that the feature is no longer supported.

Which programming languages are affected by Obsolete Feature in UI?+

CWE-448 commonly affects Not Language-Specific. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-448 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.

Learn More