Skip to main content
CUI

Documentation - V-222642

V-222642

Application Security and Development Security Technical Implementation Guide

CAT I

Title

The application must not contain embedded authentication data.

Description

<VulnDiscussion>Authentication data stored in code could potentially be read and used by anonymous users to gain access to a backend database or application servers. This could lead to compromise of application data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationCont...

Fix Text (Documentation Requirement)

Remove embedded authentication data stored in code, configuration files, scripts, HTML file, or any ASCII files.

Documentation Status

Cancel
CUI