Use_Of_Hardcoded_Password @ SolutionConstants.java

[nitinp1]

Use_Of_Hardcoded_Password issue exists @ SolutionConstants.java in branch main

The application uses the hard-coded password ADMIN_PASSWORD_LINK for authentication purposes, either using it to verify users' identities, or to access another remote system. This password at line 36 of /webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/challenges/SolutionConstants.java appears in the code, implying it is accessible to anyone with source code access, and cannot be changed without rebuilding the application.

Namespace: nitinp1
Repository: WebGoat
Repository Url: https://github.com/nitinp1/WebGoat
CxAST-Project: nitinp1/WebGoat
CxAST platform scan: 371cf28e-43c8-4e90-86fa-65d2f0911dc1
Branch: main
Application: WebGoat
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
CWE: 259
Lines: 34 35 36

---

References
Read more