2367
Category-854: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 11 - Thread APIs (THI)
Category ID : 854
Summary
Weaknesses in this category are related to rules in the Thread APIs (THI) chapter of The CERT
Oracle Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 572 Call to Thread run() instead of start() 844 1296
HasMember 705 Incorrect Control Flow Scoping 844 1542
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-855: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 12 - Thread Pools (TPS)
Category ID : 855
Summary
Weaknesses in this category are related to rules in the Thread Pools (TPS) chapter of The CERT
Oracle Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 392 Missing Report of Error Condition 844 951
HasMember 405 Asymmetric Resource Consumption (Amplification) 844 986
HasMember 410 Insufficient Resource Pool 844 998
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-856: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 13 - Thread-Safety Miscellaneous (TSM)
Category ID : 856
Summary
Weaknesses in this category are related to rules in the Thread-Safety Miscellaneous (TSM) chapter
of The CERT Oracle Secure Coding Standard for Java (2011).
CWE Version 4.14
CWE-857: The CERT Oracle Secure Coding Standard for Java (2011) Chapter 14 - Input Output
(FIO)
CWE-857: The CERT Oracle Secure Coding Standard
for Java (2011) Chapter 14 - Input Output (FIO) 2368
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-857: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 14 - Input Output (FIO)
Category ID : 857
Summary
Weaknesses in this category are related to rules in the Input Output (FIO) chapter of The CERT
Oracle Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 67 Improper Handling of Windows Device Names 844 126
HasMember 135 Incorrect Calculation of Multi-Byte String Length 844 370
HasMember 198 Use of Incorrect Byte Ordering 844 503
HasMember 276 Incorrect Default Permissions 844 665
HasMember 279 Incorrect Execution-Assigned Permissions 844 671
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
844 882
HasMember 377 Insecure Temporary File 844 925
HasMember 404 Improper Resource Shutdown or Release 844 980
HasMember 405 Asymmetric Resource Consumption (Amplification) 844 986
HasMember 459 Incomplete Cleanup 844 1099
HasMember 532 Insertion of Sensitive Information into Log File 844 1241
HasMember 732 Incorrect Permission Assignment for Critical Resource 844 1551
HasMember 770 Allocation of Resources Without Limits or Throttling 844 1613
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-858: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 15 - Serialization (SER)
Category ID : 858
Summary
CWE Version 4.14
CWE-859: The CERT Oracle Secure Coding Standard for Java (2011) Chapter 16 - Platform Security
(SEC)
CWE-859: The CERT Oracle Secure Coding Standard
for Java (2011) Chapter 16 - Platform Security (SEC)