Package illustrating a test case

Test case 89490

Type: source code
State: mixed
Author: NSA/Center for Assured Software
Status: accepted
Language: C
Submission Date: 21 May 2013
Operating System: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Description

CWE: 223 Omission of Security Relevant Information
Sinks:
GoodSink: Log the username
BadSink : Username is not logged
Flow Variant: 01 Baseline

Flaws

CWE-223 Omission of Security-relevant Information

Test Suites

Documentation

Have any comments on this test case? Please, send us an email.