CX Security_Misconfiguration @ app/routes/profile.js [master]

[kmcdon83]

Security_Misconfiguration issue exists @ app/routes/profile.js in branch master

The application takes sensitive, personal data ssn, found at line 20 of app\routes\profile.js, and stores it in an unprotected manner, without encryption, to anony1714282621var at line 42 of app\data\profile-dao.js. 

Severity: High CWE:933 Vulnerability details and guidance Internal Guidance Lines: 24 25

---

Code (Line #24):

        var ssn = req.body.ssn;

---

Code (Line #25):

        var dob = req.body.dob;

---

[kmcdon83]

Issue still exists.

[kmcdon83]

Issue still exists.