You’re delving into the unpleasant realm of risk assessment. How likely is the app going to be targeted by a threat actor, and how badly could they use it to damage your data or system?
If it’s a public facing service, I’d immediately check if I have alternative applications I could migrate too. Any hold an outsider gets through the public facing app could be used to pivot further into my network.
If it’s something that doesn’t interact with the network at all, then I wouldn’t worry nearly as much, but might look for alternatives any just because I know this isn’t going to get improved at all. Somewhere in the middle, you need to decide how much risk you can accept.
You’re delving into the unpleasant realm of risk assessment. How likely is the app going to be targeted by a threat actor, and how badly could they use it to damage your data or system?
If it’s a public facing service, I’d immediately check if I have alternative applications I could migrate too. Any hold an outsider gets through the public facing app could be used to pivot further into my network.
If it’s something that doesn’t interact with the network at all, then I wouldn’t worry nearly as much, but might look for alternatives any just because I know this isn’t going to get improved at all. Somewhere in the middle, you need to decide how much risk you can accept.