TA-trackme-cribl

2705The following line will be inspected during code review. Match: eval(t 

481The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

235The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

46The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

355The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

26The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

739The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

24The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

253The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

100The following line will be inspected during code review. The __builtin__.eval module/method can be used to execute arbitrary expression. 

185The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

128The following line will be inspected during code review. The `__builtin__.open` module/method can be used to manipulate files outside of the app dir. 

163The following lines should be inspected during code review, `gzip.open` could be used to create an archiving object, it can read or write file outside of app dir. 

174The following lines should be inspected during code review, `gzip.open` could be used to create an archiving object, it can read or write file outside of app dir. 

538The following line will be inspected during code review. The `tempfile.mkdtemp` module/method can be used to access file/directory outside of the app dir. Function call arguments: [], keywords: {} 

139The following line will be inspected during code review. The `os.fdopen` module/method can be used to access file/directory outside of the app dir. Function call arguments: ["?", "wb", "?"], keywords: {} 

244The following line will be inspected during code review. The `os.rename` module/method can be used to access file/directory outside of the app dir. Function call arguments: ["?_new", "?"], keywords: {} 

540The following line will be inspected during code review. The `os.makedirs` module/method can be used to access file/directory outside of the app dir. Function call arguments: ["?"], keywords: {} 

240The following line will be inspected during code review. The `os.remove` module/method can be used to access file/directory outside of the app dir. Function call arguments: ["?"], keywords: {} 

261The following line will be inspected during code review. The `os.remove` module/method can be used to access file/directory outside of the app dir. Function call arguments: ["?"], keywords: {} 

129The following lines should be inspected during code review. `logging.handlers.RotatingFileHandler` could be used to receive data from outside or log data to outside. 

25The following lines should be inspected during code review. `logging.handlers.RotatingFileHandler` could be used to receive data from outside or log data to outside. 

30The following lines should be inspected during code review. `logging.StreamHandler` could be used to receive data from outside or log data to outside. 

967The following lines should be inspected during code review. `logging.handlers.RotatingFileHandler` could be used to receive data from outside or log data to outside. 

187The following lines should be inspected during code review. `logging.handlers.RotatingFileHandler` could be used to receive data from outside or log data to outside. 

37The following lines should be inspected during code review. `logging.handlers.RotatingFileHandler` could be used to receive data from outside or log data to outside. 

139The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self.ENCRYPTED_TOKEN = ******` 

82The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self._code = 500` 

167The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

4The following lines should be inspected during code review, Possible plain text credentials disclosure here, `__author__ = TrackMe Limited U.K` 

247The following lines should be inspected during code review, Possible plain text credentials disclosure here, `LOG_LEVEL_KEY = loglevel` 

71The following lines should be inspected during code review, Possible plain text credentials disclosure here, `code = 500` 

95The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PASSWORD = ******` 

73The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_PERMS_DELETE_KEY = delete` 

6The following lines should be inspected during code review, Possible plain text credentials disclosure here, `__author__ = TrackMe Limited` 

227The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

230The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_RDNS_KEY = proxy_rdns` 

67The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_TYPE_KEY = obj_type` 

75The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_SHARED_BY_INCLUSION_KEY = obj_shared_by_inclusion` 

88The following lines should be inspected during code review, Possible plain text credentials disclosure here, `LOG_LEVEL_KEY_ENV = log_level` 

229The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_RDNS_KEY = proxy_rdns` 

170The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

151The following lines should be inspected during code review, Possible plain text credentials disclosure here, `GLOBAL_SETTING_KEY = global_settings` 

71The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_PERMS_READ_KEY = read` 

168The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_RDNS_KEY = proxy_rdns` 

15The following lines should be inspected during code review, Possible plain text credentials disclosure here, `__author__ = Donald Stufft and individual contributors` 

6The following lines should be inspected during code review, Possible plain text credentials disclosure here, `__author__ = TrackMe Limited` 

172The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_RDNS_KEY = proxy_rdns` 

70The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_PERMS_KEY = obj_perms` 

85The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

48The following lines should be inspected during code review, Possible plain text credentials disclosure here, `ENCRYPTED_TOKEN = ******` 

86The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_RDNS_KEY = proxy_rdns` 

71The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self._code = 500` 

258The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

87The following lines should be inspected during code review, Possible plain text credentials disclosure here, `LOG_LEVEL_KEY = loglevel` 

101The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self._code = 500` 

100The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self._code = 500` 

321The following lines should be inspected during code review, Possible plain text credentials disclosure here, `clear_password = ` 

285The following lines should be inspected during code review, Possible plain text credentials disclosure here, `clear_password = ` 

69The following lines should be inspected during code review, Possible plain text credentials disclosure here, `GLOBAL_SETTING_KEY = global_settings` 

385The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

214The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self.PASSWORD = ******` 

69The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_OWNER_KEY = obj_owner` 

66The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_ID_KEY = obj_id` 

65The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_COLLECTION_KEY = obj_collection` 

11The following lines should be inspected during code review, Possible plain text credentials disclosure here, `__author__ = Donald Stufft and individual contributors` 

73The following lines should be inspected during code review, Possible plain text credentials disclosure here, `code = 500` 

68The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_APP_KEY = obj_app` 

85The following lines should be inspected during code review, Possible plain text credentials disclosure here, `self._code = 500` 

226The following lines should be inspected during code review, Possible plain text credentials disclosure here, `PROXY_ENABLE_KEY = proxy_enabled` 

221The following lines should be inspected during code review, Possible plain text credentials disclosure here, `LOG_LEVEL_KEY = loglevel` 

72The following lines should be inspected during code review, Possible plain text credentials disclosure here, `OBJ_PERMS_WRITE_KEY = write` 

286The following lines should be inspected during code review, Possible plain text credentials disclosure here, `encr_password = ` 

176The following lines should be inspected during code review, Possible plain text credentials disclosure here, `LOG_LEVEL_KEY_ENV = log_level` 

58Environment variable being used in lib/solnlib/splunkenv.py:58: os.environ. 

61Environment variable being used in lib/solnlib/utils.py:61: os.environ. 

164Environment variable being used in lib/splunktaucclib/modinput_wrapper/base_modinput.py:164: os.environ.get. 

92Environment variable being used in lib/splunktaucclib/legacy/util.py:92: os.environ. 

537Environment variable being used in lib/splunktaucclib/modinput_wrapper/base_modinput.py:537: os.environ. 

198Environment variable being used in lib/solnlib/splunkenv.py:198: os.environ. 

307Environment variable being used in lib/solnlib/splunkenv.py:307: os.environ. 

222Environment variable being used in lib/splunktaucclib/modinput_wrapper/base_modinput.py:222: os.environ.get. 

21Environment variable being used in bin/cribl_rest_handler.py:21: os.environ. 

63Environment variable being used in lib/solnlib/splunkenv.py:63: os.environ. 

91Environment variable being used in lib/splunktaucclib/legacy/util.py:91: os.environ. 

113Environment variable being used in lib/splunktaucclib/rest_handler/util.py:113: os.environ. 

32Environment variable being used in lib/cribl_libs.py:32: os.environ. 

60Environment variable being used in lib/solnlib/utils.py:60: os.environ. 

111Environment variable being used in lib/splunktaucclib/rest_handler/util.py:111: os.environ. 

112Environment variable being used in lib/splunktaucclib/rest_handler/util.py:112: os.environ. 

357Environment variable being used in lib/urllib3/util/ssl_.py:357: os.environ.get. 

138Environment variable being used in lib/splunktaucclib/legacy/util.py:138: os.environ. 

237Environment variable being used in lib/solnlib/splunkenv.py:237: os.environ.get. 

199Environment variable being used in lib/solnlib/splunkenv.py:199: os.environ. 

34Environment variable being used in bin/cribl.py:34: os.environ. 

90Environment variable being used in lib/splunktaucclib/legacy/util.py:90: os.environ. 

110Environment variable being used in lib/splunktaucclib/rest_handler/util.py:110: os.environ. 

93Environment variable being used in lib/splunktaucclib/legacy/util.py:93: os.environ. 

151Environment variable being used in lib/splunktaucclib/splunk_aoblib/setup_util.py:151: os.environ.get. 

238Environment variable being used in lib/solnlib/splunkenv.py:238: os.environ. 

149Environment variable being used in lib/splunktaucclib/splunk_aoblib/setup_util.py:149: os.environ.get. 

78Environment variable being used in lib/splunktaucclib/rest_handler/admin_external.py:78: os.environ. 

74Environment variable being used in lib/splunktaucclib/rest_handler/admin_external.py:74: os.environ.get. 

75Environment variable being used in lib/splunktaucclib/rest_handler/admin_external.py:75: os.environ. 

627Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "json": "?", "verify": "?"} 

130Possible insecure HTTP Connection. Match: requests.Session.post Positional arguments, ["?"]; Keyword arguments, {"verify": "?", "data": "?"} 

318Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "verify": "?"} 

61Possible insecure HTTP Connection. Match: requests.request Positional arguments, []; Keyword arguments, {"method": "GET", "url": "?", "data": "?", "headers": "?", "timeout": "?", "verify": "?"} 

252Possible insecure HTTP Connection. Match: requests.Session.get Positional arguments, ["rbac_roles"]; Keyword arguments, {} 

590Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "verify": "?"} 

153Possible insecure HTTP Connection. Match: requests.Session.request Positional arguments, ["?", "?"]; Keyword arguments, {"data": "?", "headers": "?", "stream": "?", "verify": "?", "proxies": "?", "cert": "?", "null": "?"} 

607Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "verify": "?"} 

282Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["cribl_token"]; Keyword arguments, {} 

175Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["/api/v1/auth/login"]; Keyword arguments, {"json": "?", "verify": "?", "headers": "?"} 

183Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["/api/v1/auth/login"]; Keyword arguments, {"json": "?", "verify": "?", "headers": "?"} 

282Possible insecure HTTP Connection. Match: requests.Session.get Positional arguments, ["cribl_token"]; Keyword arguments, {} 

286Possible insecure HTTP Connection. Match: requests.Session.get Positional arguments, ["cribl_ssl_verify", "?"]; Keyword arguments, {} 

66Possible insecure HTTP Connection. Match: requests.Session.get Positional arguments, ["?"]; Keyword arguments, {"verify": "?"} 

651Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "verify": "?"} 

32Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "data": "?", "verify": "?"} 

66Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"verify": "?"} 

167Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["/api/v1/auth/login"]; Keyword arguments, {"json": "?", "verify": "?", "headers": "?"} 

634Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "verify": "?"} 

287Possible insecure HTTP Connection. Match: requests.Session.get Positional arguments, ["cribl_ssl_certificate_path", "?"]; Keyword arguments, {} 

681Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "json": "?", "verify": "?"} 

327Possible insecure HTTP Connection. Match: requests.delete Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "data": "?", "verify": "?"} 

286Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["cribl_ssl_verify", "?"]; Keyword arguments, {} 

130Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"verify": "?", "data": "?"} 

58Possible insecure HTTP Connection. Match: requests.request Positional arguments, []; Keyword arguments, {"method": "GET", "url": "?", "data": "?", "headers": "?", "timeout": "?", "verify": "?"} 

322Possible insecure HTTP Connection. Match: requests.post Positional arguments, ["?"]; Keyword arguments, {"headers": "?", "data": "?", "verify": "?"} 

252Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["rbac_roles"]; Keyword arguments, {} 

153Possible insecure HTTP Connection. Match: requests.request Positional arguments, ["?", "?"]; Keyword arguments, {"data": "?", "headers": "?", "stream": "?", "verify": "?", "proxies": "?", "cert": "?", "null": "?"} 

287Possible insecure HTTP Connection. Match: requests.get Positional arguments, ["cribl_ssl_certificate_path", "?"]; Keyword arguments, {} 

34The following line will be inspected during code review.Possible secret disclosure found. Match: passSystemAuth        = true 

2The following line will be inspected during code review. Possible secret disclosure found. Match: AKIAqgCyALoAYABoAGAA 

58Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

634Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

590Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

322Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

607Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

32Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

651Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

61Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

627Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

153Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

681Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

167Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

318Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

175Ensure that the SSL certificate validation for communications with outside the Splunk Cloud stack is enabled. This can be done by specifying the relevant parameters (verify, cafile etc) to True or the certificate path. 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

Suppressed 61 manual_check messages

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: 

The executable will be inspected during code review: