About GET A DEMO

Backslash Vulnerability Database

Public Static Field Not Marked Final

Public Static Field Not Marked Final

CWE-500

Short description

An object contains a public static field that is not marked final, which might allow it to be modified in unexpected ways.

Extended description

Public static variables can be read without an accessor and changed without a mutator by any classes in the application.

Best practices to prevent this CWE

Phase: Architecture and Design

Clearly identify the scope for all critical data elements, including whether they should be regarded as static.

Phase: Implementation

Make any static fields private and constant.

A constant field is denoted by the keyword 'const' in C/C++ and ' final' in Java

Prioritize and Uncover Reachable Vulnerabilities in Your Application Code

Identify externally reachable data flows and vulnerabilities for effective risk mitigation

© 2023 Backslash. 28 HaArba'a St., Tel-Aviv Privacy Policy | Terms of Use