trevorghess/movie-database

CWE-260 found in file

Opened this issue 2 years ago · 2 comments

trevorghess commented 2 years ago

There is a CWE in test file. It has Password in Configuration File

secure-code-warrior-for-github commented 2 years ago

Micro-Learning Topic: Password in Configuration File (CWE 260)

Matched on "CWE-260"

What is this? (2min video)

The software stores a password in a configuration file that might be accessible to actors who do not know the password.

Try a challenge in Secure Code Warrior

trevorghess commented a year ago

CWE-236
CWE-238
CWE-358