Java : Unsafe access to environment variables

Because environment variables are visible to all children of the process that defines them, and not just to the immediate Java subprocess, they have the most global effect. They may have significantly different semantics on different operating systems, such as case insensitivity. For these reasons, environment variables are more likely to have unpredictable side effects that an attacker can exploit.