Home / Vulnerability Database / Go : Undocumented feature: security parameters modification
Go
Go : Undocumented feature: security parameters modification
Classification
Overview
The application contains the code that changes the logic of authentication by overwriting the variable that indicates whether the authentication is successful.
Using the assignment operator (=) instead of the comparison operator (==) is a common mistake. It is particularly dangerous and may be the part of the backdoor when occurs in the methods related to authentication.
LOW
DerScanner Severity Score
Do you want to fix Go : Undocumented feature: security parameters modification in your application?
See also
Go
Go : Undocumented feature: special account
Go
Go : Nil salt
Go