We have detected that Logback uses a hardcoded password in the source code(ch/qos/logback/core/net/ssl/SSL.java).
A hardcoded password is nothing but a plaintext password stored in the source code. Hardcoded password can be easily retrieved or manipulated through reverse engineering.
Creating this issue to check if it possible to not hardcode the password as plaintext or encrypt the password in the source code to avoid this vulnerability.
We have detected that Logback uses a hardcoded password in the source code(ch/qos/logback/core/net/ssl/SSL.java). A hardcoded password is nothing but a plaintext password stored in the source code. Hardcoded password can be easily retrieved or manipulated through reverse engineering.
Creating this issue to check if it possible to not hardcode the password as plaintext or encrypt the password in the source code to avoid this vulnerability.