First Flight #1: PasswordStore
First Flight #1
Beginner FriendlyFoundry
100 EXP
View results
Previous Next
Submission Details
Severity: high
Invalid

Password Handling in Deployment Script

0xtheblackpanther

Summary

In the DeployPasswordStore.s.sol script, it is not recommended to pass plain password text/values directly.

Vulnerability Details

Passing plain password text/values directly in the DeployPasswordStore.s.sol script is insecure and not recommended, potentially exposing sensitive information and compromising overall security.

Impact

Passing plain password text/values directly in the DeployPasswordStore.s.sol script can expose sensitive information, posing a security risk to the overall application and potentially leading to unauthorized access and data breaches.

Tools Used

  • Foundry

  • Manual testing

Recommendations

A more secure approach would be to read passwords from an environment file (e.g., .env).

  • create .env file and configure PASSWORD in there

  • access it DeployPasswordStore.s.sol like process.env.PASSWORD

-passwordStore.setPassword("myPassword");
+passwordStore.setPassword(process.env.PASSWORD);
Updates

Lead Judging Commences

inallhonesty Lead Judge
about 2 years ago
inallhonesty Lead Judge about 2 years ago
Submission Judgement Published
Invalidated
Reason: Other

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.