Java : Policy manipulation

SecurityManager policy settings are overwritten during application operation. This allows an attacker to unpredictably change the behavior of the application or disrupt its work.

The setting manipulation attack aims to modify application settings in order to cause misleading data or advantages on the attacker’s behalf. The attacker manipulate values in the system and manage specific user resources of the application or affect its functionalities.