Variant weakness
Draft
CWE-498: Cloneable Class Containing Sensitive Information
The code contains a class with sensitive data, but the class is cloneable. The data can then be accessed by cloning the class.
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Medium
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Cloneable classes are effectively open classes, since data cannot be hidden in them. Classes that do not explicitly deny cloning can be cloned by any other class without running the constructor.