search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Heap_Inspection @ Content/ForgotPassword.aspx.designer.cs [master] #129

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Heap_Inspection issue exists @ Content/ForgotPassword.aspx.designer.cs in branch master

Method labelPassword; at line 103 of Content\ForgotPassword.aspx.designer.cs defines labelPassword, which is designated to contain user passwords. However, while plaintext passwords are later assigned to labelPassword, this variable is never cleared from memory. 

Severity: Medium

CWE:244

Checkmarx

Lines: 103

Code (Line #103):

        protected global::System.Web.UI.WebControls.Literal labelPassword;
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 1 vulnerabilities left to be fix (Please scroll to the top for more information)