Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="57ba2e4abe357c6c-2553dbec-4004458d-a09bb78e-8981df6ca765c43ea1116ba2"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Insufficiently Protected Credentials [java:XYM]"

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE ID 256, "Plaintext Storage of a Password"

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7bc16c7b8984641b-500a5b0a-4c0441c2-8473b270-054a37e38497a4c5e66bc6cc"><ac:plain-text-body><![CDATA[

[SD:[API 2006

java:AA. References#API 06]]

Class java.security.MessageDigest

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="95142e474c4d43f9-febbaaee-4d954b8a-9cf49982-f4adae39b3211e38f1d3269e"><ac:plain-text-body><![CDATA[

[SD:[API 2006

java:AA. References#API 06]]

Class  Class java.lang.String

]]></ac:plain-text-body></ac:structured-macro>

http://www.javapractices.com/topic/TopicAction.do?Id=216

Passwords never in clear text

http://en.wikipedia.org/wiki/Salt_(cryptography) 

Salt (cryptography)

http://en.wikipedia.org/wiki/Cryptographic_hash_function 

Cryptographic hash function

http://nsa.gov/

 

...

      49. Miscellaneous (MSC)      Image Removed SC04-J. Do not leak memory