Page Information

Title:	MSC18-C. Be careful while handling sensitive data, such as passwords, in program code
Author:	Aditya Kali	Nov 08, 2008
Last Changed by:	Francesco Mariani	Aug 31, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/stYxBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (1)     Page: MSC03-J. Never hard code sensitive information

Parent Page     Page: Rec. 48. Miscellaneous (MSC)

• cwe-798
• cwe-326
• cwe-311
• android-applicable
• exportable-c++
• unenforceable
• recommendation
• msc
• klocwork

Time	Editor
Aug 31, 2025 05:14	Francesco Mariani	View Changes
Jul 24, 2025 11:13	Jill Britton	View Changes
May 20, 2025 09:26	David Svoboda	View Changes
REM Cost Reform
Apr 05, 2024 15:44	David Svoboda	View Changes
Mar 31, 2021 13:23	Jon O'Donnell

External Links (17)
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cwe.mitre.org/
    https://cwe.mitre.org/data/definitions/259.html
    cwe.mitre.org/data/definitions/798.html
    www.cs.auckland.ac.nz/%7Epgut001/pubs/secure_del.html
    cwe.mitre.org/data/definitions/326.html
    www.cgisecurity.com/lib/protecting-sensitive-data.html
    https://cwe.mitre.org/data/definitions/319.html
    secureapps.blogspot.com/2006/10/security-considerations-whe…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.msc18…
    cwe.mitre.org/data/definitions/311.html
    https://cwe.mitre.org/data/definitions/321.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    https://cwe.mitre.org/data/definitions/261.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT Oracle Coding Standard for Java (2)     Page: MSC03-J. Never hard code sensitive information     Home page: SEI CERT Oracle Coding Standard for Java

SEI CERT C Coding Standard (16)     Page: MSC41-C. Never hard code sensitive information     Page: AA. Bibliography     Page: CodeSonar     Page: Helix QAC     Home page: SEI CERT C Coding Standard     Page: Polyspace Bug Finder     Page: PC-lint Plus_V     Page: Polyspace Bug Finder_V     Page: MSC06-C. Beware of compiler optimizations     Page: Security Reviewer - Static Reviewer_V     Page: BB. Definitions     Page: CodeSonar_V     Page: MEM06-C. Ensure that sensitive data is not written out to disk     Page: Helix QAC_V     Page: PC-lint Plus     Page: Security Reviewer - Static Reviewer