CX Hardcoded_password_in_Connection_String @ BookDetail_jsp2.java [master]

[cxflowtestuser]

Hardcoded_password_in_Connection_String issue exists @ BookDetail_jsp2.java in branch master

The application contains hardcoded connection details, """", at line 35 of BookDetail_jsp2.java. This connection string contains a hardcoded password, which is used in cn at line 115 of BookDetail_jsp2.java to connect to a database server with getConnection. This can expose the database password, and impede proper password management. 

Severity: Medium

CWE:547

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training
Recommended Fix

Lines: 35

---

Code (Line #35):

  static final String DBpassword="";

---

[cxflowtestuser]

Issue still exists.