Code Security Report: 6 total findings

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2024-11-22 11:03pm
Total Findings: 6 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 147
Detected Programming Languages: 2 (Go, JavaScript / TypeScript*)

• Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Detected
Medium	Weak Pseudo-Random	CWE-338	sessions.go:192	1	2024-11-19 10:02pm
Vulnerable Code cfm/pkg/accounts/sessions.go Line 192 in 211a099 r := rand.New(seed) Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Weak Pseudo-Random Training ● Videos    ▪ Secure Code Warrior Weak Pseudo-Random Video ● Further Reading    ▪ OWASP Insecure Randomness
Medium	Heap Inspection	CWE-244	flags.go:102	1	2024-10-17 05:37pm
Vulnerable Code cfm/cli/pkg/serviceLib/flags/flags.go Line 102 in 211a099 APPLIANCE_PASSWORD_DFLT string = "dummypswd" Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	flags.go:59	1	2024-10-17 05:37pm
Vulnerable Code cfm/cli/pkg/serviceLib/flags/flags.go Line 59 in 211a099 DEVICE_PASSWORD_SH string = "W" Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	flags.go:58	1	2024-10-17 05:37pm
Vulnerable Code cfm/cli/pkg/serviceLib/flags/flags.go Line 58 in 211a099 DEVICE_PASSWORD string = DEVICE + "-" + PASSWORD Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	flags.go:116	1	2024-10-17 05:37pm
Vulnerable Code cfm/cli/pkg/serviceLib/flags/flags.go Line 116 in 211a099 HOST_PASSWORD_DFLT string = "admin12345" Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	flags.go:109	1	2024-10-17 05:37pm
Vulnerable Code cfm/cli/pkg/serviceLib/flags/flags.go Line 109 in 211a099 BLADE_PASSWORD_DFLT string = "0penBmc" Secure Code Warrior Training Material