CWE-492Variant

Use of Inner Class Containing Sensitive Data

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

Inner classes are translated into classes that are accessible at package scope and may expose code that the programmer intended to keep private to attackers.

The record
Technical detail
CWE ID
CWE-492
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf