Code Security Finding: Hardcoded Password/Credentials (CWE-798, Medium Severity) in session.js:149

[dimagwhitesourceapp]

Code Security Finding

This finding was first detected on 2023-12-04 11:31pm GMT and is still present in the last scan performed on 2024-02-07 01:37am GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Medium	Hardcoded Password/Credentials	CWE-798	session.js:149	1
Vulnerable Code JS-Demo/app/routes/session.js Line 149 in 8d9a490 errors.passwordError = ""; Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Hardcoded Password/Credentials Training ● Videos    ▪ Secure Code Warrior Hardcoded Password/Credentials Video ● Further Reading    ▪ OWASP Top Ten 2017 A3: Sensitive Data Exposure    ▪ OWASP Top Ten Proactive Controls 2018 C8: Protect Data Everywhere    ▪ OWASP Top Ten 2021 A02: Cryptographic Failures 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk