Missing Serialization Control Element

Opis

The product contains a serializable data element that does not have an associated serialization method.

Skutki

• Other

  Reduce Reliability

  This issue can prevent the product from running reliably, e.g. by triggering an exception. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-710 Improper Adherence to Coding Standards

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Reliability Measure (ASCRM) — Object Management Group (OMG), ASCRM-RLB-2, 2016