Public Static Final Field References Mutable Object

Opis

A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.

Skutki

• Integrity

  Modify Application Data

Zapobieganie

• Implementation

  Protect mutable objects by making them private. Restrict access to the getter and setter as well.

Słabość nadrzędna

• CWE-471 Modification of Assumed-Immutable Data (MAID)

Kiedy powstaje

• Implementation

Dotyczy

Java