CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 10 Control flow: if(IO.s...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 09 Control flow: if(IO.s...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 08 Control flow: if(priv...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 07 Control flow: if(priv...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 06 Control flow: if(priv...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 05 Control flow: if(priv...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 04 Control flow: if(priv...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 03 Control flow: if(5==5...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 02 Control flow: if(true...

CWE: 257 Storing passwords in a recoverable format BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 01 Baseline

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 7...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 6...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 6...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 6...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 6...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 5...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 5...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 5...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 5...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 5...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 4...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 4...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 4...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 3...

CWE: 257 Storing passwords in a recoverable format BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: GoodSink: one-way hash instead of symmetric crypto BadSink : symmetric encryption with an easy key Flow Variant: 1...