search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Heap_Inspection @ WebGoatCoins/ChangePassword.aspx [master] #163

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Heap_Inspection issue exists @ WebGoatCoins/ChangePassword.aspx in branch master

Method /> at line 21 of WebGoatCoins\ChangePassword.aspx defines ButtonChangePassword, which is designated to contain user passwords. However, while plaintext passwords are later assigned to ButtonChangePassword, this variable is never cleared from memory. 

Severity: Medium

CWE:244

Checkmarx

Lines: 21

Code (Line #21):

        <asp:Button ID="ButtonChangePassword" SkinID="Button" runat="server" Text="Change Password" OnClick="ButtonChangePassword_Click" />