search

CxTests / BookStore

0 stars 0 forks source link

CX Hardcoded_password_in_Connection_String @ EditorialsRecord_jsp.java [master] #46

Open rronen04 opened 3 years ago

rronen04 commented 3 years ago

Hardcoded_password_in_Connection_String issue exists @ EditorialsRecord_jsp.java in branch master

The application contains hardcoded connection details, """", at line 31 of EditorialsRecord_jsp.java. This connection string contains a hardcoded password, which is used in cn at line 112 of EditorialsRecord_jsp.java to connect to a database server with getConnection. This can expose the database password, and impede proper password management.

Severity: Medium

CWE:547

Checkmarx

Training Recommended Fix

Lines: 31

Code (Line #31):

  static final String DBpassword="";
rronen04 commented 3 years ago

Issue still exists.

rronen04 commented 3 years ago

Issue still exists.