V-222648
Application Security and Development Security Technical Implementation Guide
Title
An application code review must be performed on the application.
Description
<VulnDiscussion>A code review is a systematic evaluation of computer source code conducted for the purposes of identifying and remediating the security flaws in the software. This requirement is meant to apply to developers or organizations that are doing application development work and have the responsibility for maintaining the application source code. Examples of security flaws include but are not limited to: - format string exploits - memory leaks - buffer overflows - race conditions -...
Fix Text (Documentation Requirement)
Conduct and document code reviews on the application during development and identify and remediate all known and potential security vulnerabilities prior to releasing the application.