...
APIs that mirror language checks |
---|
java.lang.Class.newInstance |
java.lang.reflect.Constructor.newInstance |
java.lang.reflect.Field.get* |
java.lang.reflect.Field.set* |
java.lang.reflect.Method.invoke |
java.util.concurrent.atomic.AtomicIntegerFieldUpdater.newUpdater |
java.util.concurrent.atomic.AtomicLongFieldUpdater.newUpdater |
java.util.concurrent.atomic.AtomicReferenceFieldUpdater.newUpdater |
Risk Assessment
TODOPerforming access checks against the immediate caller, instead of against each caller in the execution sequence, may seriously compromise the security of a java application.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
SEC04-J | ?? medium ?? | probable | ?? high | P?? | L?? |
Automated Detection
...