DerScanner
Home / Vulnerability Database / Scala : Explicit socket handling
Scala

Scala : Explicit socket handling

Classification

CWE
CWE-246

Overview

Using sockets in Web applications is not recommended.

J2EE standard permits the direct use of socket in the presence of higher-level protocol only to maintain compatibility. Developing your own communication protocol includes a plurality of decisions related to safety issues (error handling, version compatibility, session management, etc.). If you implement your own protocol there is high probability of errors leading to vulnerabilities.

References

  1. CWE-246: J2EE Bad Practices: Direct Use of Sockets
  2. Servlet for implementing socket connection
LOW

DerScanner Severity Score

Do you want to fix Scala : Explicit socket handling in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length