Variant weakness
Draft
CWE-493: Critical Public Variable Without Final Modifier
The product has a critical public variable that is not final, which allows the variable to be modified to contain unexpected values.
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
If a field is non-final and public, it can be changed once the value is set by any function that has access to the class which contains the field. This could lead to a vulnerability if other parts of the program make assumptions about the contents of that field.