Skip to content

Use of Hard-coded Credentials ('Credentials Management') [VID:7] #17

Description

https://github.com/GitHub-workflow-APP/python_mongo_test/blob/a92fc24a5ea96afe459991271b9754e8464d66d7//app/populate_db.js#L3-L13

Filename: populate_db.js

Line: 8

CWE: 798 (Use of Hard-coded Credentials ('Credentials Management'))

The application contains hard-coded information that may contain credentials to an external service. The use of hard-coded credentials significantly increases the possibility that the account being protected will be compromised. username Store credentials out-of-band from the application code. Follow best practices for protecting credentials stored in locations such as configuration or properties files. References: CWE/nDon't know how to fix this? Don't know why this was reported?
Get Assistance from Veracode

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Veracode Policy ScanA Veracode Flaw found during a Policy or Sandbox ScanVeracodeFlaw: MediumA Veracode Flaw, Medium severity

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions