The product uses hard-coded constants instead of symbolic names for security-critical values, which increases the likelihood of mistakes during code maintenance or security policy change.
Avoid using hard-coded constants. Configuration files offer a more flexible solution.
Our security experts can help you identify and remediate CWE-547 vulnerabilities in your codebase.
Get Security Assessment