smmclaughlin / CxFlowBodgeit

0 stars 0 forks source link

CX Hardcoded_password_in_Connection_String @ root/home.jsp [master] #15

Open smmclaughlin opened 3 years ago

smmclaughlin commented 3 years ago

Hardcoded_password_in_Connection_String issue exists @ root/home.jsp in branch master

The application contains hardcoded connection details, """", at line 10 of root\home.jsp. This connection string contains a hardcoded password, which is used in null; at line 10 of root\home.jsp to connect to a database server with getConnection. This can expose the database password, and impede proper password management.

Severity: Medium

CWE:547

Checkmarx

Training Recommended Fix

Lines: 10


Code (Line #10):

    PreparedStatement stmt = null;

smmclaughlin commented 3 years ago

Issue still exists.