Home / Vulnerability Database / Groovy : Hard code sensitive information
Groovy

Groovy : Hard code sensitive information

Classification

OWASP Top 10 2021
CWE/SANS Top 25 2011
CWE/SANS Top 25 2021

Overview

Hard coding sensitive information, such as passwords, server IP addresses, and encryption keys can expose the information to attackers. Anyone who has access to the class files can decompile them and discover the sensitive information. Leaking data protected by International Traffic in Arms Regulations (ITAR) or the Health Insurance Portability and Accountability Act (HIPAA) can also have legal consequences. Consequently, programs must not hard code sensitive information.

MEDIUM

DerScanner Severity Score

Do you want to fix Groovy : Hard code sensitive information in your application?

See also

Groovy

Groovy : Weak hashing algorithm

Groovy

Groovy : Hardcoded salt

Groovy

Groovy : Unsafe padding