SEI CERT Oracle Secure Coding Standard for Java - Guidelines 13. Input Output (FIO)

Opis

Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) section of the SEI CERT Oracle Secure Coding Standard for Java.

Wpisy w tej grupie

• CWE-67 Improper Handling of Windows Device Names
• CWE-180 Incorrect Behavior Order: Validate Before Canonicalize
• CWE-198 Use of Incorrect Byte Ordering
• CWE-276 Incorrect Default Permissions
• CWE-279 Incorrect Execution-Assigned Permissions
• CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
• CWE-377 Insecure Temporary File
• CWE-404 Improper Resource Shutdown or Release
• CWE-405 Asymmetric Resource Consumption (Amplification)
• CWE-459 Incomplete Cleanup
• CWE-532 Insertion of Sensitive Information into Log File
• CWE-647 Use of Non-Canonical URL Paths for Authorization Decisions
• CWE-705 Incorrect Control Flow Scoping
• CWE-732 Incorrect Permission Assignment for Critical Resource
• CWE-770 Allocation of Resources Without Limits or Throttling

Źródła