Common Weakness Enumeration

    CWE Definition / CWE-579

    CWE-579: J2EE Bad Practices: Non-serializable Object Stored in Session

    The product stores a non-serializable object as an HttpSession attribute.

    Published:15 Dec 2006
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-573: Improper Following of Specification by Caller