Page History

HARDCODED.AUTH

HARDCODED.KEY

HARDCODED.SALT

MISC.CRYPTO.NOPADMISC.PWD.PLAIN

Hardcoded Authentication

Hardcoded Crypto Key

Hardcoded Crypto SaltEncryption without Padding

Plaintext Storage of Password

Sensitive heap memory not cleared before release

Uncleared sensitive data in stack

Unsafe standard encryption function

Constant cipher key

Constant block cipher initialization vector

Predictable cipher key

Predictable block cipher initialization vector

Sensitive data not cleared or released by memory routine

Variable in stack is not cleared and contains sensitive data

Function is not reentrant or uses a risky encryption algorithm

Encryption or decryption key is constant instead of randomized or  generated from a weak random number generator

Initialization vector is constant instead of randomized

Encryption or decryption key is generated from a weak random number generator

Initialization vector is generated from a weak random number generator