9.Using Components with known vulnerabilities.(OWASP TOP 10)
Using Components with known vulnerabilities.
* Potential vulnerabilities exist if :
* you do not know the version of all components you (both client-side and server-side ).this includes components you directly use as well as nested dependencies .
* Software is vulnerabilities , unsupported , or out of the date . this includes ,the OS , web/application server , database management system system (DBMS), application ,APIs and all components ,runtime environments , and libraries .
* You do not scan for vulnerabilities regularly and subscribe to security bulletins related to the components you use .
* If software developments do not test the compatibility of updated ,upgraded , or patched libraries.
Comments
Post a Comment