Page History

SCG 2009

Guideline 6-2 . " Safely invoke java.security.AccessController.doPrivileged "

MITRE CWE

CWE ID 266, "Incorrect Privilege Assignment"

CWE ID 272, "Least Privilege Violation"

CWE ID 732, "Incorrect Permission Assignment for Critical Resource"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="089ace39d1fcf8d2-f2cfa9a2-4d9e4b78-aa878ece-b6ad32f2fdce060b854c5e83"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method doPrivileged()

http://java.sun.com/javase/6/docs/api/java/security/AccessController.html#doPrivileged(java.security.PrivilegedAction)]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a627930249c7bb05-3b6783ae-4e584818-bc5f856f-9f6df73235e6cccae3905511"><ac:plain-text-body><![CDATA[

[[Gong 2003

AA. Bibliography#Gong 03]]

Sections 6.4, "AccessController"

]]></ac:plain-text-body></ac:structured-macro>

9.5 "Privileged Code"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="8a1b709d9d352815-85fc1967-4c464489-9447a11a-f8898fce94500e700cc12e81"><ac:plain-text-body><![CDATA[

[[Jovanovic 2006

AA. Bibliography#Jovanovic 06]]

"Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities"

]]></ac:plain-text-body></ac:structured-macro>