cve.bz

CWE-499: Serializable Class Containing Sensitive Data

Filter

The code contains a class with sensitive data, but the class does not explicitly deny serialization.

What the weakness is: CWE-499 at MITRE. All weaknesses

Ask an AI about CWE-499

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-499: Serializable Class Containing Sensitive Data and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/499.html and https://cve.bz/cve/cwe/499?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2024-5657EPSS 0.8%

    The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.

  2. 6.5CVE-2022-39309EPSS 1.1%

    GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions prior to 21.1.0 leak the symmetric key used to encrypt/decrypt any secure vari…