CWE-9Variant

J2EE Misconfiguration: Weak Access Permissions for EJB Methods

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

If elevated access rights are assigned to EJB methods, then an attacker can take advantage of the permissions to exploit the product.

The record
Technical detail
CWE ID
CWE-9
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf