VYPR

CWE-487

Reliance on Package-level Scope

BaseIncompleteLikelihood: Medium

Description

Java packages are not inherently closed; therefore, relying on them for code security is not a good practice.

The purpose of package scope is to prevent accidental access by other parts of a program. This is an ease-of-software-development feature but not a security feature.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (0)

No CVEs match the current filter.