search

International-Data-Spaces-Association / omejdn-daps

Open Source implementation of the Dynamic Attribute Provisioning Service based on http://github.com/Fraunhofer-AISEC/omejdn-server
Apache License 2.0
7 stars 10 forks source link

Authentication password detected #3

Closed jfernandezsqs closed 3 years ago

jfernandezsqs commented 3 years ago

I have carried out a sonarqube scanner to the DAPS and I have obtained the following security hotspot in the code:

image

The scanner has detected a password here. Is this a hard coded credential that could be a security issue for the component?

Thanks in advance.

bellebaum commented 3 years ago

This is a function to update a password in a SQLite database. Sonarqube seems to blindly search for the string password= and ignore any context. So no, this is not a hardcoded credential.

jfernandezsqs commented 3 years ago

Okay, thank you for confirming. I close the issue.