Public cloneable() Method Without Final ('Object Hijack')

Properties

id: d3f:CWE-491

name
Public cloneable() Method Without Final ('Object Hijack')
definition
A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.
json

Neighbors

CWE-491 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.