Possible Database Details stored in values.yaml
Medium
S
Sifchain
Submitted None
Actions:
Reported by
sparta5537
Vulnerability Details
Technical details and impact analysis
The database details like username and database name are disclosed in the below mentioned file. Assuming a blank password since the password field was empty.
File Location : https://github.com/Sifchain/sifnode/blob/740331dad061ee0f5a3cf3798d429f294b70f0ae/deploy/helm/block-explorer/values.yaml
I have attached screenshot in this report.
## Impact
An attacker can use this vulnerability to access the database once he is on the internal system.
Report Details
Additional information and metadata
State
Closed
Substate
Duplicate
Submitted
Weakness
Cleartext Storage of Sensitive Information