search

redhat-developer / intellij-quarkus

IntelliJ Quarkus Tools
Eclipse Public License 2.0
120 stars 51 forks source link

Possible security issue: hard-coded password #170

Closed akondasif closed 4 years ago

akondasif commented 4 years ago

Greetings,

We are security researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of hard-coded passwords. According to CWE, "A hard-coded password typically leads to a significant authentication failure that can be difficult for the system administrator to detect."

Hopefully, you agree and will fix it.

Source: https://github.com/redhat-developer/intellij-quarkus/blob/master/projects/maven/using-vertx/src/main/resources/application.properties

jeffmaury commented 4 years ago

This is about a test project and does represent a fake non existent password