The software does not properly protect an assumed-immutable
					element from being modified by an attacker.