CX Heap_Inspection @ root/password.jsp [main]

[wwesleyalves]

Heap_Inspection issue exists @ root/password.jsp in branch main

*Method password1 at line 10 of root\password.jsp defines password1, which is designated to contain user passwords. However, while plaintext passwords are later assigned to password1, this variable is never cleared from memory.Similarity ID: 1733257182

Method password2 at line 11 of root\password.jsp defines password2, which is designated to contain user passwords. However, while plaintext passwords are later assigned to password2, this variable is never cleared from memory.Similarity ID: 1204577246*

Severity: Low

CWE:244

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 10 11

---

Code (Line #10):

String password1 = (String) request.getParameter("password1");

---

Code (Line #11):

String password2 = (String) request.getParameter("password2");

---

[wwesleyalves]

Issue still exists.