When the J2EE container attempts to write unserializable objects to disk there is no guarantee that the process will complete successfully.
All objects that become part of session and application scope must implement the java.io.Serializable interface to ensure serializability of containing objects.
Our security experts can help you identify and remediate CWE-594 vulnerabilities in your codebase.
Get Security Assessment