Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: updated tables

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

FIO00- J

TODO

TODO

TODO

P???

L???

FIO01-J

medium

unlikely

medium

P4

L3

FIO02 FIO01- J

medium low

unlikely probable

medium

P4

L3

FIO03 FIO02- J

low

unlikely

medium

P2

L3

FIO04 FIO03- J

TODO low

TODO

TODO

P???

L???

FIO05-J

TODO

TODO

TODO

P???

L???

FIO06-J

TODO

TODO

TODO

P???

L???

unlikely

medium

P2

FIO07-J

medium

probable

high

P4

L3

Rules

Rules

Severity

Likelihood

Remediation Cost

Priority

Level

FIO30- J

TODO medium TODO

probable

TODO

P???

high

P4

L3 L???

FIO31- J

TODO medium TODO

probable

TODO

P???

L???

FIO32-J

TODO

TODO

TODO

P???

L???

FIO33-J

TODO

TODO

TODO

P???

L???

high

P4

L3

FIO32- J

FIO34-J

low

probable

medium

P4

L3

FIO35 FIO33- J

medium

unlikely

medium

P4

L3

FIO36 FIO34- J

high

probable

medium P12

L1

FIO37-J

medium

probable

high

P4

L3

FIO38 FIO36- J

medium low

probable unlikely

high medium

P4 P2

L3

FIO39 FIO37- J

low Low

unlikely Unlikely

medium

P2

Medium

P???

L??? L3

...

OBJ38-J. Immutable classes must prohibit extension      The CERT Sun Microsystems Secure Coding Standard for Java      FIO00-J. Canonicalize path names originating from untrusted sources