SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 109

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: REM cost reform

...

Deserializing objects from an unrestricted privileged context can result in arbitrary code execution.

Rule

Severity

Likelihood

Remediation Cost

Detectable

Repairable

Priority

Level

SER08-J

High

Likely

Medium

Yes

No

P18

L1

Related Guidelines

MITRE CWE

CWE-250, Execution with Unnecessary Privileges

Bibliography

[API 2014]

 


[CVE 2011]

CVE-2008-5353

...


...

Image Modified Image Modified Image Modified