Serializable Class Containing Sensitive Data

The code contains a class with sensitive data, but the class does not explicitly deny serialization.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.1.

How this weakness is prevented

• Implementation: In Java, explicitly define final writeObject() to prevent serialization. This is the recommended solution. Define the writeObject() function to throw an exception explicitly denying serialization.
• Implementation: Make sure to prevent serialization of your objects.