Inspectopedia
 
2024.3

Access of system properties

Warning
New
Last modified: 03 December 2024

Reports code that accesses system properties using one of the following methods:

  • System.getProperties(), System.setProperty(), System.setProperties(), System.clearProperties()

  • Integer.getInteger()

  • Boolean.getBoolean()

While accessing the system properties is not a security risk in itself, it is often found in malicious code. Code that accesses system properties should be closely examined in any security audit.