CWE-607 — Public Static Final Field References Mutable Object
CWE-607: Public Static Final Field References Mutable Object
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | — |
Description
A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.
Common consequences
- Integrity: Modify Application Data
Mitigations
Implementation — Protect mutable objects by making them private. Restrict access to the getter and setter as well.
References
- CWE page: https://cwe.mitre.org/data/definitions/607.html
- CWE list: https://cwe.mitre.org/data/index.html