...
If files are created without appropriate permissions, an attacker may read or write to the files, possibly resulting in compromised system integrity and information disclosure.
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
FIO01-J | Medium | Probable | No | HighNo | P4 | L3 |
Automated Detection
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| JAVA.IO.PERM.ACCESS | Accessing file in permissive mode | ||||||
| Parasoft Jtest |
| CERT.FIO01.ASNF | Avoid implicit file creation when a String is passed as an argument | ||||||
| PVS-Studio |
| V5318 |
Related Guidelines
VOID FIO06-CPP. Create files with appropriate access permissions | |
| ISO/IEC TR 24772:2010 | Missing or Inconsistent Access Control [XZN] |
CWE-279, Incorrect Execution-Assigned Permissions |
...