CWE-500: Public Static Field Not Marked Final
ID
CWE-500
Abstraction
Variant
Structure
Simple
Status
Draft
An object contains a public static field that is not marked final, which might allow it to be modified in unexpected ways.
Public static variables can be read without an accessor and changed without a mutator by any classes in the application.
Modes of Introduction
| Phase | Note |
|---|---|
| Implementation |
Applicable Platforms
| Type | Class | Name | Prevalence |
|---|---|---|---|
| Language | C++ | ||
| Language | Java |
Loading...