Heap_Inspection issue exists @ root/init.jsp in branch master
Method + at line 8 of root\init.jsp defines passwordSize, which is designated to contain user passwords. However, while plaintext passwords are later assigned to passwordSize, this variable is never cleared from memory.
Severity: Low
CWE:244
Checkmarx
Training
Recommended Fix
Lines: 8
Code (Line #8):
int passwordSize = 5 + (int)(Math.random() * 10);