Sign upLogin

avocado-framework/avocado

View on GitHub
Star

Showing 885 of 902 total issues

Probable insecure usage of temp file/directory.
Open

        if os.path.exists("/var/tmp"):
Severity: Minor
Found in avocado/core/main.py by bandit

Starting a process with a shell, possible injection detected, security issue.
Open

        self.pipe = os.popen(paginator, "w")
Severity: Major
Found in avocado/core/output.py by bandit

Try, Except, Pass detected.
Open

            except Exception:  # pylint: disable=W0703
Severity: Info
Found in avocado/plugins/teststmpdir.py by bandit

subprocess call - check for execution of untrusted input.
Open

            self.process = subprocess.Popen(
                args,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
Severity: Info
Found in avocado/utils/gdb.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    wwids = process.run(cmd, ignore_status=True, sudo=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/multipath.py by bandit

Probable insecure usage of temp file/directory.
Open

            os.environ["TMP"] = "/var/tmp"
Severity: Minor
Found in avocado/core/main.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

        wwids = process.run(cmd, ignore_status=True, sudo=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/multipath.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, ignore_status=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/pci.py by bandit

Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Open

    return random.choice(choices)
Severity: Info
Found in contrib/scripts/task-state-machine.py by bandit

Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Open

        combination_parameters_index = random.randint(0, len(possible_parameters) - 1)
Severity: Info
Found in optional_plugins/varianter_cit/avocado_varianter_cit/Cit.py by bandit

Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Open

            column_index = random.randint(0, len(row) - 1)
Severity: Info
Found in optional_plugins/varianter_cit/avocado_varianter_cit/Cit.py by bandit

subprocess call - check for execution of untrusted input.
Open

        proc = subprocess.Popen(
            cmd.split(), stdout=subprocess.PIPE, stderr=subprocess.STDOUT
Severity: Info
Found in selftests/functional/interrupt.py by bandit

Try, Except, Pass detected.
Open

        except Exception:
Severity: Info
Found in selftests/unit/utils/cloudinit.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

            interface_type = process.system_output(
                cmd, shell=True, ignore_status=True
Severity: Minor
Found in avocado/utils/network/interfaces.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, shell=True, sudo=True, ignore_status=True).stdout_text
Severity: Minor
Found in avocado/utils/nvme.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    if process.system(cmd, shell=True, ignore_status=True):
Severity: Minor
Found in avocado/utils/nvme.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

        process.run(cmd, shell=True, ignore_status=True)
Severity: Minor
Found in avocado/utils/nvme.py by bandit

Use of insecure MD2, MD4, MD5, or SHA1 hash function.
Open

        device_hash = hashlib.sha1(self.device.encode("utf-8")).hexdigest()
Severity: Minor
Found in avocado/utils/partition.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, ignore_status=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/pci.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

    assert total_time >= 10

    # check of timeout enforcement
Severity: Info
Found in examples/apis/utils/ssh_timeout.py by bandit
Severity
Category
Status
Source
Language