Variant weakness
Draft
CWE-382: J2EE Bad Practices: Use of System.exit()
A J2EE application uses System.exit(), which also shuts down its container.
Last updated
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
It is never a good idea for a web application to attempt to shut down the application container. Access to a function that can shut down the application is an avenue for Denial of Service (DoS) attacks.
Common consequences
What can happen when CWE-382 is exploited.
DoS: Crash, Exit, or Restart
Affects: Availability
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Implementation
Applies to
Languages
Java
Technologies
Web Based
Web Server
How to prevent it
Practical mitigations for CWE-382, grouped by where in the lifecycle they apply.