The "Security Manager" System Property is set to "Allow Access"

Impact area

Security

Severity

High

Affected element

System property

Rule ID

SN-0100

Impact

Setting the Security Manager default behavior to Allow Access means that write access to system tables is allowed by default

Remediation

Set the glide.sm.default_mode property to deny to disallow access to system fields unless other ACLs explicitly grant it

Time to fix

15 min

References

This rule is linked to Common Weakness Enumeration CWE-284 Improper Access Control.




Last modified on Oct 13, 2020