CWE-491Variant

Public cloneable() Method Without Final ('Object Hijack')

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.

The record
Technical detail
CWE ID
CWE-491
Abstraction
Variant
Structure
Simple
Status
Draft
References (2)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdfhttp://www.owasp.org/index.php/Mobile_code:_object_hijack