The application must not contain embedded authentication data.
An XCCDF Rule
Description
<VulnDiscussion>Authentication data stored in code could potentially be read and used by anonymous users to gain access to a backend database or application servers. This could lead to compromise of application data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-222642r961863_rule
- Severity
- High
- References
- Updated
Remediation - Manual Procedure
Remove embedded authentication data stored in code, configuration files, scripts, HTML file, or any ASCII files.