Details
-
Bug
-
Status: Closed
-
High
-
Resolution: Done
-
Honolulu Release
-
Policy 4/21 - 5/5
Description
Sonarcloud identified the following security bugs in your project and, as agreed by the TSC, should be fixed within the Honolulu release. Any not finished in Honolulu must be fixed within the Istanbul release. Follow each of the URLs for details on each each bug, along with recommended fixes.
If any of the links below fail, please find your code on the master list found at <https://sonarcloud.io/organizations/onap/issues?resolved=false&sonarsourceSecurity=weak-cryptography>.
Project: onap_clamp
Component: onap_clamp:src/main/java/org/onap/clamp/clds/util/CryptoUtils.java
Message: Use secure mode and padding scheme.
Severity: BLOCKER
Line: 106
Effort:
Creation-Date: 2017-12-19T14:58:08+0100
URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGFM1LNl8tlF3n92utq&open=AXGFM1LNl8tlF3n92utq
Project: onap_clamp
Component: onap_clamp:src/main/java/org/onap/clamp/clds/util/CryptoUtils.java
Message: Use secure mode and padding scheme.
Severity: BLOCKER
Line: 125
Effort:
Creation-Date: 2017-12-19T14:58:08+0100
URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGFM1LNl8tlF3n92utr&open=AXGFM1LNl8tlF3n92utr
Project: onap_clamp
Component: onap_clamp:src/main/java/org/onap/clamp/clds/util/CryptoUtils.java
Message: Use a dynamically-generated, random IV.
Severity: CRITICAL
Line: 126
Effort: 15min
Creation-Date: 2018-02-14T15:17:45+0100
URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXfbZ1Ec-p6zO6corvYF&open=AXfbZ1Ec-p6zO6corvYF