CWE-493Variant

Critical Public Variable Without Final Modifier

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product has a critical public variable that is not final, which allows the variable to be modified to contain unexpected values.

The record
Technical detail
CWE ID
CWE-493
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf