search

cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX Hardcoded_Password_in_Connection_String @ vulnerable/sql.go [master] #19

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

Hardcoded_Password_in_Connection_String issue exists @ vulnerable/sql.go in branch master

The application contains hardcoded connection details, "file::memory:?cache=shared", at line 29 of vulnerable\sql.go. This connection string contains a hardcoded password, which is used in PrepareSQLDB at line 29 of vulnerable\sql.go to connect to a database server with "file::memory:?cache=shared". This can expose the database password, and impede proper password management.Similarity ID: -531879776

Severity: Medium

CWE:547

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 29

Code (Line #29):

db, err := sql.Open("sqlite3", "file::memory:?cache=shared")
github-actions[bot] commented 1 month ago

Issue still exists.