...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
SER03-J | medium | likely | high | P6 | L2 |
Automated Detection
Tool | Version | Checker | Description |
|---|---|---|---|
| Coverity | 7.5 | UNSAFE_DESERIALIZATION | Implemented |
Related Guidelines
CWE-499. Serializable class containing sensitive data | |
| CWE-502. Deserialization of untrusted data |
Secure Coding Guidelines for the Java Programming Language, Version 3.0 | Guideline 5-2. Guard sensitive data during serialization |
...
SER02-J. Sign then seal sensitive objects before sending them outside a trust boundary 13. Rule 14: Serialization (SER)