jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Use_Of_Hardcoded_Password @ App_Code/DB/DbConstants.cs [master] #181

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Use_Of_Hardcoded_Password issue exists @ App_Code/DB/DbConstants.cs in branch master

The application uses a single, hard-coded password KEY_PWD for authentication purposes, either using it to verify users' identities, or to access another remote system. This password at line 15 of App_Code\DB\DbConstants.cs appears in the code as plaintext, and cannot be changed without rebuilding the application. 

Severity: Low

CWE:259

Checkmarx

Lines: 15


Code (Line #15):

        public const string KEY_PWD = "pwd";