• Home
• org.sonarsource.dotnet
• sonar-csharp-plugin
• 9.31.0.96804
• source code
• S4347.json

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.sonar.plugins.csharp.S4347.json Maven / Gradle / Ivy

{
  "title": "Secure random number generators should not output predictable values",
  "type": "VULNERABILITY",
  "code": {
    "impacts": {
      "SECURITY": "HIGH"
    },
    "attribute": "LOGICAL"
  },
  "status": "ready",
  "remediation": {
    "func": "Constant\/Issue",
    "constantCost": "2min"
  },
  "tags": [
    "cwe",
    "pitfall"
  ],
  "defaultSeverity": "Critical",
  "ruleSpecification": "RSPEC-4347",
  "sqKey": "S4347",
  "scope": "Main",
  "securityStandards": {
    "CWE": [
      330,
      332,
      336,
      337
    ],
    "OWASP": [
      "A6"
    ],
    "OWASP Top 10 2021": [
      "A2"
    ],
    "ASVS 4.0": [
      "2.3.1",
      "2.6.2",
      "2.9.2"
    ]
  },
  "quickfix": "unknown"
}