DerScanner
Home / Vulnerability Database / Scala : No SecurityManager checks in clone()
Scala

Scala : No SecurityManager checks in clone()

Classification

OWASP Top 10 2017
A6-Security Misconfiguration
OWASP Top 10 2021
A5-Security Misconfiguration

Overview

Security checks via SecurityManager or AccessController are present in the class constructor, but not in the clone() method. Cloneable class must produce the same checks in the clone() method.

When calling clone() the constructor is not called, therefore, security checks defined in the constructor will not be performed.

References

  1. OWASP Top 10 2017-A6-Security Misconfiguration
  2. SecurityManager - docs.oracle.com
  3. Secure Coding Guidelines for Java SE
LOW

DerScanner Severity Score

Do you want to fix Scala : No SecurityManager checks in clone() in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length