Page History

SCG 2009

Guideline 6-2 . " Safely invoke java.security.AccessController.doPrivileged "

MITRE CWE

CWE ID 266, "Incorrect Privilege Assignment"

CWE ID 272, "Least Privilege Violation"

CWE ID 732, "Incorrect Permission Assignment for Critical Resource"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="50f81d849a5d6c8c-6299a5d2-466042b9-a1789ede-41d7c8e0003f5e21f2206a06"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method doPrivileged()

http://java.sun.com/javase/6/docs/api/java/security/AccessController.html#doPrivileged(java.security.PrivilegedAction)]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="72ec6e2a04493797-5d963c15-4e444029-9a2589c8-f5c6a8413222691c4dbae4a0"><ac:plain-text-body><![CDATA[

[[Gong 2003

AA. Bibliography#Gong 03]]

Sections 6.4, "AccessController"

]]></ac:plain-text-body></ac:structured-macro>

9.5 "Privileged Code"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="8769b0eddb0a2b29-ac18bed2-42c54373-8e098b8b-74d56e2e7a31940651b9cc23"><ac:plain-text-body><![CDATA[

[[Jovanovic 2006

AA. Bibliography#Jovanovic 06]]

"Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities"

]]></ac:plain-text-body></ac:structured-macro>