Code Security Report: 10 total findings

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2024-09-05 05:21pm
Total Findings: 10 | New Findings: 7 | Resolved Findings: 7
Tested Project Files: 158
Detected Programming Languages: 1 (C/C++ (Beta))

• Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Date
Medium	Heap Inspection	CWE-244	device_info.h:47	1	2024-07-17 04:21pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/nx/sdk/helpers/device_info.h Line 47 in 2fe0767 std::string m_password; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	child_process.h:39	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 39 in 2fe0767 processReturn dryRun(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.h:52	1	2024-08-29 11:46pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.h Line 52 in 2fe0767 std::string m_passphrase; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:262	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 262 in 2fe0767 std::string secretKey = values[kSecretKeyPasswordFieldId]; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	child_process.h:66	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 66 in 2fe0767 processReturn encryptConfig(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	child_process.h:40	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 40 in 2fe0767 processReturn mount(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:406	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 406 in 2fe0767 std::string secretKey = values[kSecretKeyPasswordFieldId]; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:42	1	2024-08-30 04:10pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 42 in 2fe0767 static std::string generatePassphrase(); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	settings_model.h:22	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/settings_model.h Line 22 in 2fe0767 static const std::string kSecretKeyPasswordFieldId = "secretKey"; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:512	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 512 in 2fe0767 std::string generatePassphrase() Secure Code Warrior Training Material