westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

Missing_Encryption_of_Sensitive_Data @ datacreator.ts #87

Open westonphillips opened 1 year ago

westonphillips commented 1 year ago

Missing_Encryption_of_Sensitive_Data issue exists @ datacreator.ts in branch main

The sensitive data in totpSecret at /data/datacreator.ts in line 104 is stored in plain-text by UserId at /data/datacreator.ts in line 173.

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: 6a8170d0-38fa-4efc-81df-42628474102c Branch: main Application: CheckmarxOnePOV Severity: MEDIUM State: TO_VERIFY Status: RECURRENT CWE: 311 Lines: 98 104 481 488 495 502 509 516 523 530 537


References Read more