Docker Wget Password

Description

The source code repository contains sensitive information: Docker wget Password Hardcoded

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Docker wget Password Hardcoded patterns in source code and configuration files

Vulnerable code example

RUN wget --password='secret' http://example.com
wget --password="admin123" http://example.com