Skip to content

Security-related question about a possible exposed credential #72

Description

@Emma-NYL

Hello,

My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.

While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.

Could you please help clarify whether the detected string is:

  1. a real credential, or
  2. a placeholder / example value?

Thank you for your time.


Code snippet (sensitive values masked):

            reg_exp = self.shard_regex()
         else:
            reg_exp = self.add_shard_regex()

         gsmhost=self.ora_env_dict["ORACLE_HOSTNAME"]
         cadmin=self.ora_env_dict["SHARD_ADMIN_USER"]
         cpasswd="HIDD****TRING"
         #dtrname,dtrport,dtregion=self.process_director_vars()
         self.ocommon.set_mask_str(self.ora_env_dict["ORACLE_PWD"])
         for key in self.ora_env_dict.keys():
            if(reg_exp.match(key)):
               shard_db,shard_pdb,shard_port,shard_group,shard_host,shard_region,shard_space=self.process_shard_vars(key)
               #group_region=self.get_shardg_region_name(shard_group)

Thank you in advance for your time - I really appreciate it!

Sincerely,
Emma

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions