Serializable_Class_Containing_Sensitive_Data @ /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java

[AaronZhouYu]

Checkmarx (SAST): Serializable_Class_Containing_Sensitive_Data
Security Issue: Read More about Serializable_Class_Containing_Sensitive_Data
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: d9fa6dd5-d23b-4436-b75a-41a016305f39

---

The field phone in /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java in line 24, which contains sensitive data, is inserted into a Serializable object, /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java, in line 12, into the field User.

Result #1:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. phone: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[24,20]
    2. User: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[12,1]
    Review result in Checkmarx One: Serializable_Class_Containing_Sensitive_Data

Result #2:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. secret: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[23,20]
    2. User: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[12,1]
    Review result in Checkmarx One: Serializable_Class_Containing_Sensitive_Data

Result #3:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. password: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[22,20]
    2. User: /src/main/java/org/t246osslab/easybuggy4sb/core/model/User.java[12,1]
    Review result in Checkmarx One: Serializable_Class_Containing_Sensitive_Data