CWE-607: Public Static Final Field References Mutable Object
Description
A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Integrity
Modify Application Data
Potential mitigations
- Implementation
Protect mutable objects by making them private. Restrict access to the getter and setter as well.
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.