cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX Plain_Text_Transport_Layer_in_Server @ server/main.go [master] #42

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

Plain_Text_Transport_Layer_in_Server issue exists @ server/main.go in branch master

The application starts a server using main, in server\main.go at line 27. This server will listen and respond to requests made in plain text, without the use of SSL/TLS.This will expose transported data to Man-in-the-Middle attacks. Similarity ID: 406574915

Severity: Low

CWE:319

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 27


Code (Line #27):

err = http.ListenAndServe(addr, sqhttp.Middleware(router))

github-actions[bot] commented 1 month ago

Issue still exists.