CWE-859 · Kategoria
The CERT Oracle Secure Coding Standard for Java (2011) Chapter 16 - Platform Security (SEC)
- Status
- Przestarzały
- Dodano
- 24 maja 2011
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to rules in the Platform Security (SEC) chapter of The CERT Oracle Secure Coding Standard for Java (2011).
Wpisy w tej grupie
- CWE-111 Direct Use of Unsafe JNI
- CWE-266 Incorrect Privilege Assignment
- CWE-272 Least Privilege Violation
- CWE-300 Channel Accessible by Non-Endpoint
- CWE-302 Authentication Bypass by Assumed-Immutable Data
- CWE-319 Cleartext Transmission of Sensitive Information
- CWE-347 Improper Verification of Cryptographic Signature
- CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
- CWE-494 Download of Code Without Integrity Check
- CWE-732 Incorrect Permission Assignment for Critical Resource
- CWE-807 Reliance on Untrusted Inputs in a Security Decision
Źródła
Wpis z katalogu CWE 4.20.