This page is experimental and may change significantly in future releases.
Serializable Class Containing Sensitive Data
Properties
id: d3f:CWE-499
- name
- Serializable Class Containing Sensitive Data
- definition
- The code contains a class with sensitive data, but the class does not explicitly deny serialization. The data can be accessed by serializing the class through another class.
Neighbors
CWE-499 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-499 has no related weaknesses in this release.