2451
Summary
Weaknesses in this category are related to the rules and recommendations in the Input Output
(FIO) section of the SEI CERT Oracle Secure Coding Standard for Java.
Membership
Nature Type ID Name Page
MemberOf 1133 Weaknesses Addressed by the SEI CERT Oracle
Coding Standard for Java
1133 2582
HasMember 67 Improper Handling of Windows Device Names 1133 126
HasMember 180 Incorrect Behavior Order: Validate Before Canonicalize 1133 451
HasMember 198 Use of Incorrect Byte Ordering 1133 503
HasMember 276 Incorrect Default Permissions 1133 665
HasMember 279 Incorrect Execution-Assigned Permissions 1133 671
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
1133 882
HasMember 377 Insecure Temporary File 1133 925
HasMember 404 Improper Resource Shutdown or Release 1133 980
HasMember 405 Asymmetric Resource Consumption (Amplification) 1133 986
HasMember 459 Incomplete Cleanup 1133 1099
HasMember 532 Insertion of Sensitive Information into Log File 1133 1241
HasMember 647 Use of Non-Canonical URL Paths for Authorization
Decisions
1133 1426
HasMember 705 Incorrect Control Flow Scoping 1133 1542
HasMember 732 Incorrect Permission Assignment for Critical Resource 1133 1551
HasMember 770 Allocation of Resources Without Limits or Throttling 1133 1613
References
[REF-826]The Software Engineering Institute. "SEI CERT Oracle Coding Standard for Java :
Rule 13. Input Output (FIO)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88487725 >.
[REF-1004]The Software Engineering Institute. "SEI CERT Oracle Coding Standard for Java :
Rec 13. Input Output (FIO)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88487330 >.
Category-1148: SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 14. Serialization (SER)
Category ID : 1148
Summary
Weaknesses in this category are related to the rules and recommendations in the Serialization
(SER) section of the SEI CERT Oracle Secure Coding Standard for Java.
Membership
Nature Type ID Name Page
MemberOf 1133 Weaknesses Addressed by the SEI CERT Oracle
Coding Standard for Java
1133 2582
HasMember 319 Cleartext Transmission of Sensitive Information 1133 779
HasMember 400 Uncontrolled Resource Consumption 1133 964
CWE Version 4.14
CWE-1149: SEI CERT Oracle Secure Coding Standard for Java - Guidelines 15. Platform Security
(SEC)
CWE-1149: SEI CERT Oracle Secure Coding Standard
for Java - Guidelines 15. Platform Security (SEC) 2452
Nature Type ID Name Page
HasMember 499 Serializable Class Containing Sensitive Data 1133 1198
HasMember 502 Deserialization of Untrusted Data 1133 1204
HasMember 770 Allocation of Resources Without Limits or Throttling 1133 1613
References
[REF-827]The Software Engineering Institute. "SEI CERT Oracle Coding Standard for Java :
Rule 14. Serialization (SER)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88487787 >.
Category-1149: SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 15. Platform Security (SEC)
Category ID : 1149
Summary
Weaknesses in this category are related to the rules and recommendations in the Platform Security
(SEC) section of the SEI CERT Oracle Secure Coding Standard for Java.
Membership
Nature Type ID Name Page
MemberOf 1133 Weaknesses Addressed by the SEI CERT Oracle
Coding Standard for Java
1133 2582
HasMember 266 Incorrect Privilege Assignment 1133 638
HasMember 272 Least Privilege Violation 1133 656
HasMember 732 Incorrect Permission Assignment for Critical Resource 1133 1551
References
[REF-828]The Software Engineering Institute. "SEI CERT Oracle Coding Standard for Java :
Rule 15. Platform Security (SEC)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88487683 >.
[REF-1005]The Software Engineering Institute. "SEI CERT Oracle Coding Standard for Java :
Rec 15. Platform Security (SEC)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88487332 >.
Category-1150: SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 16. Runtime Environment (ENV)
Category ID : 1150
Summary
Weaknesses in this category are related to the rules and recommendations in the Runtime
Environment (ENV) section of the SEI CERT Oracle Secure Coding Standard for Java.
Membership
Nature Type ID Name Page
MemberOf 1133 Weaknesses Addressed by the SEI CERT Oracle
Coding Standard for Java
1133 2582
HasMember 349 Acceptance of Extraneous Untrusted Data With Trusted
Data
1133 861
CWE Version 4.14
CWE-1151: SEI CERT Oracle Secure Coding Standard for Java - Guidelines 17. Java Native
Interface (JNI)
CWE-1151: SEI CERT Oracle Secure Coding Standard
for Java - Guidelines 17. Java Native Interface (JNI)