https://github.com/GitHub-workflow-APP/python_mongo_test/blob/a92fc24a5ea96afe459991271b9754e8464d66d7//app/populate_db.js#L-1-L9
Filename: populate_db.js
Line: 4
CWE: 259 (Use of Hard-coded Password ('Credentials Management'))
This variable assignment uses a hard-coded password that may compromise system security in a way that cannot be easily remedied. The use of a hard-coded password significantly increases the possibility that the account being protected will be compromised. Moreover, the password cannot be changed without patching the software. If a hard-coded password is compromised in a commercial product, all deployed instances may be vulnerable to attack. In some cases, this finding may indicate a reference to a password (e.g. the name of a key in a properties file) rather than an actual password. password Store passwords out-of-band from the application code. Follow best practices for protecting credentials stored in locations such as configuration or properties files. An HSM may be appropriate for particularly sensitive credentials. References: CWE/nDon't know how to fix this? Don't know why this was reported?
Get Assistance from Veracode
https://github.com/GitHub-workflow-APP/python_mongo_test/blob/a92fc24a5ea96afe459991271b9754e8464d66d7//app/populate_db.js#L-1-L9
Filename: populate_db.js
Line: 4
CWE: 259 (Use of Hard-coded Password ('Credentials Management'))
This variable assignment uses a hard-coded password that may compromise system security in a way that cannot be easily remedied. The use of a hard-coded password significantly increases the possibility that the account being protected will be compromised. Moreover, the password cannot be changed without patching the software. If a hard-coded password is compromised in a commercial product, all deployed instances may be vulnerable to attack. In some cases, this finding may indicate a reference to a password (e.g. the name of a key in a properties file) rather than an actual password. password Store passwords out-of-band from the application code. Follow best practices for protecting credentials stored in locations such as configuration or properties files. An HSM may be appropriate for particularly sensitive credentials. References: CWE/nDon't know how to fix this? Don't know why this was reported?
Get Assistance from Veracode