GitHub Security Lab: [Java] CWE-555: Query to detect password in Java EE configuration files

This bug was reported directly to GitHub Security Lab...