Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Rules

Content by Label
showLabelsfalse
max99
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@3bbaf8c
showSpacefalse
sorttitle
cqllabel = "rule" and label = "err" and space = currentSpace()
labels+err +rule

Risk Assessment Summary

Rule

Severity

Likelihood

Detectable

Repairable

Priority

Level

ERR00-JLowProbableYesNo

P4

L3

ERR01-JMediumProbableNoYes

P8

 L2

ERR02-JMediumLikelyYesNo

P12

 L1

ERR03-JLowProbableNoNo

P2

L3

ERR04-JLowProbableYesYes

P6

L2

ERR05-JLowUnlikelyYesNo

P2

L3

ERR06-JLowUnlikelyNoNo

P1

L3

ERR07-JLowLikelyYesNo

P6

L2

ERR08-JMediumLikelyYesNo

P12

L1

ERR09-JLowUnlikelyNoNo

P1

L3


...

Image Added Image Added Image Added

Recommendations

EXC00-J. Do not suppress or ignore checked exceptions

EXC01-J. Do not allow exceptions to transmit sensitive information

EXC02-J. Prevent exceptions while logging data

EXC03-J. Try to gracefully recover from system errors

EXC04-J. Prevent against inadvertent calls to System.exit() or forced shutdown

EXC05-J. Use a class dedicated to reporting exceptions

EXC06-J. Do not let code throw undeclared checked exceptions

EXC07-J. Restore prior object state on method failure

EXC08-J. Use a logging API to log critical security exceptions

EXC09-J. Do not catch NullPointerException

Rules

EXC30-J. Do not exit abruptly from a finally block

EXC31-J. Handle checked exceptions that can be thrown within a finally block

EXC32-J. Catch specific exceptions as opposed to the more general RuntimeException

EXC33-J. Throw specific exceptions as opposed to the more general RuntimeException or Exception

EXC34-J. Do not allow unsanitized user input to be logged

Risk Assessment Summary

Recommendations

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

EXC00- J

low

probable

medium

P4

L3

EXC01- J

medium

probable

high

P4

L3

EXC02- J

medium

likely

high

P6

L2

EXC03- J

low

unlikely

medium

P2

L3

EXC04- J

low

unlikely

medium

P2

L3

EXC05- J

medium

likely

high

P6

L2

EXC06- J

low

unlikely

high

P1

L3

EXC07- J

low

probable

high

P2

L3

EXC08- J

low

probable

low

P6

L2

EXC09- J

medium

unlikely

medium

P4

L3

EXC10- J

low

unlikely

medium

P3

L3

Rules

Rules

Severity

Likelihood

Remediation Cost

Priority

Level

EXC30- J

low

probable

medium

P4

L3

EXC31- J

low

unlikely

medium

P2

L3

EXC32- J

low

likely

medium

P6

L2

EXC33- J

low

likely

medium

P6

L2

EXC34- J

medium

probable

medium

P8

L2

MET39-J. Do not use the clone method to copy untrusted method parameters      The CERT Sun Microsystems Secure Coding Standard for Java      EXC00-J. Do not suppress or ignore checked exceptions