Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: changing RA Table

...

A comprehensive way of handling this issue is to grant the application the permissions to operate only on files present within the intended directory �€” the user's home directory in this example. This compliant solution specifies the absolute path of the program in its security policy file and grants java.io.FilePermission with target ${user.home}/* and actions read and write.

...

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

IDS02-J

mediumMedium

unlikelyUnlikely

mediumMedium

P4

L3

Automated Detection

ToolVersionCheckerDescription
Fortify1.0

Path_Manipulation

Implemented

...