Category-1148: SEI CERT Oracle Java安全编码标准-准则14.序列化(SER)

  • A+
所属分类:CWE(弱点枚举)

Category-1148: SEI CERT Oracle Java安全编码标准-准则14.序列化(SER)

ID: 1148
Status: Stable

Summary

Weaknesses in this category are related to the rules and recommendations in the Serialization (SER) section of the SEI CERT Oracle Secure Coding Standard for Java.

Membership

ID NAME
CWE-319 敏感数据的明文传输
CWE-400 未加控制的资源消耗(资源穷尽)
CWE-499 可序列化的类中包含敏感信息
CWE-502 可信数据的反序列化
CWE-770 不加限制或调节的资源分配

References

REF-827 SEI CERT Oracle Coding Standard for Java : Rule 14. Serialization (SER)

文章来源于互联网:scap中文网

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: