diff --git a/python/lang/security/audit/ftplib.yaml b/python/lang/security/audit/ftplib.yaml deleted file mode 100644 index a002121899..0000000000 --- a/python/lang/security/audit/ftplib.yaml +++ /dev/null @@ -1,27 +0,0 @@ -rules: -- id: ftplib - pattern: ftplib.$ANYTHING(...) - message: >- - FTP does not encrypt communications by default. This can lead to sensitive - data being exposed. Ensure use of FTP here does not expose sensitive data. - metadata: - source-rule-url: https://github.com/PyCQA/bandit/blob/d5f8fa0d89d7b11442fc6ec80ca42953974354c8/bandit/blacklists/calls.py#L265 - cwe: - - 'CWE-319: Cleartext Transmission of Sensitive Information' - owasp: - - A03:2017 - Sensitive Data Exposure - - A02:2021 - Cryptographic Failures - bandit-code: B321 - references: - - https://docs.python.org/3/library/telnetlib.html - category: security - technology: - - ftplib - subcategory: - - audit - likelihood: LOW - impact: MEDIUM - confidence: LOW - severity: WARNING - languages: - - python diff --git a/python/lang/security/audit/insecure-transport/ftplib/use-ftp-tls.yaml b/python/lang/security/audit/insecure-transport/ftplib/use-ftp-tls.yaml index 11beea5840..ee2fbaa4b6 100644 --- a/python/lang/security/audit/insecure-transport/ftplib/use-ftp-tls.yaml +++ b/python/lang/security/audit/insecure-transport/ftplib/use-ftp-tls.yaml @@ -35,5 +35,5 @@ rules: likelihood: LOW impact: LOW confidence: LOW - severity: WARNING + severity: INFO languages: [python]