|
|
Status: Draft Weakness ID: 608 (Weakness Variant)Description Summary An ActionForm class contains a field that has not been declared private, which can be accessed without using a setter or getter. Weakness Ordinalities Primary (where the weakness exists independent of other weaknesses) Causal Nature Explicit (an explicit
weakness resulting from behavior of the developer) Potential Mitigations Make all fields private. Use getter to get the value of the field. Setter should be used only by the framework; setting an action form field from other actions is bad practice and should be avoided. Relationships
Taxonomy Mappings
Applicable Platforms Languages Java Time of Introduction  ImplementationContent History Submissions Anonymous Tool Vendor (under NDA). (Externally Mined) Modifications Eric Dalci. Cigital. 2008-07-01. (External) updated Time_of_Introduction CWE Content Team. MITRE. 2008-09-08. (Internal) updated Relationships, Taxonomy_Mappings, Weakness_Ordinalities |
|
|
|||
