search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Heap_Inspection @ Content/EncryptVSEncode.aspx.designer.cs [master] #200

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Heap_Inspection issue exists @ Content/EncryptVSEncode.aspx.designer.cs in branch master

Method txtPassword; at line 24 of Content\EncryptVSEncode.aspx.designer.cs defines txtPassword, which is designated to contain user passwords. However, while plaintext passwords are later assigned to txtPassword, this variable is never cleared from memory. 

Severity: Medium

CWE:244

Checkmarx

Lines: 24

Code (Line #24):

        protected System.Web.UI.WebControls.TextBox txtPassword;