CWE-500—Public Static Field Not Marked Final

PUBLISHEDweakness recordHigh
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-500
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Public Static Field Not Marked Final

描述

An object contains a public static field that is not marked final, which might allow it to be modified in unexpected ways.

Public static variables can be read without an accessor and changed without a mutator by any classes in the application.

常见后果

范围：
Integrity
影响：
Modify Application Data
注释：
The object could potentially be tampered with.
范围：
Confidentiality
影响：
Read Application Data
注释：
The object could potentially allow the object to be read.

相关 CWE

browse all CWEs