wwesleyalves / bodgeit

0 stars 0 forks source link

CX Heap_Inspection @ root/init.jsp [main] #93

Open wwesleyalves opened 1 year ago

wwesleyalves commented 1 year ago

Heap_Inspection issue exists @ root/init.jsp in branch main

Method + at line 8 of root\init.jsp defines passwordSize, which is designated to contain user passwords. However, while plaintext passwords are later assigned to passwordSize, this variable is never cleared from memory.Similarity ID: -1070785380

Severity: Low

CWE:244

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 8


Code (Line #8):

int passwordSize = 5 + (int)(Math.random() * 10);

wwesleyalves commented 1 year ago

Issue still exists.