Possible use of private data

Impact area

Security

Severity

Warning

Affected element

Business Rule

Catalog Client Script

Client Script

Dictionary

Email Scripts

Inbound Email Actions

Record Producer

Script Action

Script Include

Scripted REST Resource

Table Transform Map

Transform Script

UI Action

UI Script

Widget Angular Provider

Widget


Rule number

SN-0133

Impact

Storing private or sensitive data such as passwords in your code can lead to security vulnerabilities.

Remediation

Ensure that sensitive data is only used in code where strictly necessary, and never logged.

Time to fix

50 min

References

This rule is linked to Common Weakness Enumeration CWE-259 Use of Hard-coded Password.




Last modified on Oct 13, 2020