CWE Definition / CWE-8

CWE-8: J2EE Misconfiguration: Entity Bean Declared Remote

The J2EE application exposes a remote interface for an entity bean, but it also exposes methods that get or set the bean's data.