Skip to content

CX Heap_Inspection @ root/init.jsp [master] #50

@CxYair

Description

@CxYair

Heap_Inspection issue exists @ root/init.jsp in branch master

Method + at line 8 of root\init.jsp defines passwordSize, which is designated to contain user passwords. However, while plaintext passwords are later assigned to passwordSize, this variable is never cleared from memory.

Severity: Low

CWE:244

Checkmarx

Training
Recommended Fix

Lines: 8


Code (Line #8):

		int passwordSize = 5 + (int)(Math.random() * 10);

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions