Page Information

Title:	MSC18-C. Be careful while handling sensitive data, such as passwords, in program code
Author:	Aditya Kali	Nov 08, 2008
Last Changed by:	David Svoboda	Apr 05, 2024
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/stYxBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (1)     Page: MSC03-J. Never hard code sensitive information

Parent Page     Page: Rec. 48. Miscellaneous (MSC)

• cwe-798
• cwe-326
• cwe-311
• android-applicable
• exportable-c++
• unenforceable
• recommendation
• msc
• klocwork

Time	Editor
Apr 05, 2024 15:44	David Svoboda	View Changes
Mar 31, 2021 13:23	Jon O'Donnell	View Changes
Mar 03, 2021 14:26	Kris Kafka	View Changes
Added PC-lint Plus to Automated Detection Table
Aug 30, 2019 18:13	Anirban Gangopadhyay	View Changes
Jul 09, 2019 13:36	Jon O'Donnell

External Links (17)
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cwe.mitre.org/
    https://cwe.mitre.org/data/definitions/259.html
    cwe.mitre.org/data/definitions/798.html
    www.cs.auckland.ac.nz/%7Epgut001/pubs/secure_del.html
    cwe.mitre.org/data/definitions/326.html
    www.cgisecurity.com/lib/protecting-sensitive-data.html
    https://cwe.mitre.org/data/definitions/319.html
    secureapps.blogspot.com/2006/10/security-considerations-whe…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.msc18…
    cwe.mitre.org/data/definitions/311.html
    https://cwe.mitre.org/data/definitions/321.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    https://cwe.mitre.org/data/definitions/261.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT Oracle Coding Standard for Java (2)     Page: MSC03-J. Never hard code sensitive information     Home page: SEI CERT Oracle Coding Standard for Java

SEI CERT C Coding Standard (12)     Page: MSC41-C. Never hard code sensitive information     Page: AA. Bibliography     Page: CodeSonar     Home page: SEI CERT C Coding Standard     Page: Polyspace Bug Finder     Page: PC-lint Plus_V     Page: Polyspace Bug Finder_V     Page: MSC06-C. Beware of compiler optimizations     Page: BB. Definitions     Page: CodeSonar_V     Page: MEM06-C. Ensure that sensitive data is not written out to disk     Page: PC-lint Plus