CWE-582

Array Declared Public, Final, and Static

Medium

Description

The product declares an array public, final, and static, which is not sufficient to prevent the array's contents from being modified.

Potential Impact

Integrity: Modify Application Data

How to Fix

Implementation

In most situations the array should be made private.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-582 vulnerabilities in your codebase.

Get Security Assessment