CWE-1107 — Vulnerability Class 2

CWE-1107 represents a structural weakness where symbolic constants are defined in scattered, non-centralized locations rather than being isolated in a dedicated configuration or header file. This lack of isolation typically leads to maintenance errors and potential security vulnerabilities, as developers may inadvertently modify or duplicate constant values across different modules. Exploitation often occurs indirectly when an attacker identifies inconsistent constant definitions to trigger unexpected application behavior, bypass logic checks, or cause denial-of-service conditions through resource exhaustion. To mitigate this risk, developers should adhere to strict coding standards that mandate the centralization of all symbolic constants. By consolidating these definitions into a single, isolated location, teams ensure consistency, simplify updates, and reduce the attack surface associated with hard-coded values, thereby enhancing overall code integrity and maintainability.