CX Security_Misconfiguration @ app/routes/profile.js [master]

[kmcdon83]

Security_Misconfiguration issue exists @ app/routes/profile.js in branch master

The application takes sensitive, personal data ssn, found at line 20 of app\routes\profile.js, and stores it in an unprotected manner, without encryption, to anony1714282621var at line 42 of app\data\profile-dao.js. 

Severity: High
CWE:933
Vulnerability details and guidance
Internal Guidance
Lines: 24 25

---

Code (Line #24):

        var ssn = req.body.ssn;

---

Code (Line #25):

        var dob = req.body.dob;

---

[kmcdon83]

Issue still exists.

[kmcdon83]

Issue still exists.