Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

MITRE CWE

CWE ID 266, "Incorrect Privilege Assignment"

 

CWE ID 272, "Least Privilege Violation" SCG 2009

Secure Coding Guidelines for the Java Programming Language, Version 3.0

Guideline 6-2 Safely invoke java.security.AccessController.doPrivileged()

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="46ae98c7cd74cccf-cdd954ee-445445e1-9a03b250-78014e6942da320ba1bbaacc"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method doPrivileged()

http://java.sun.com/javase/6/docs/api/java/security/AccessController.html#doPrivileged(java.security.PrivilegedAction)]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="17f25df796d4d33a-a1d70770-4f6a4495-b198bed0-0b91c69478e6be401c98aee1"><ac:plain-text-body><![CDATA[

[[Gong 2003

AA. Bibliography#Gong 03]]

Sections 6.4, AccessController and 9.5 Privileged Code

]]></ac:plain-text-body></ac:structured-macro>

...