logo

Database

Rails Master Secret Key

Description

The source code repository contains sensitive information: Rails Master Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Rails Master Secret Key patterns in source code and configuration files

Vulnerable code example

RAILS_MASTER_KEY=3f9a2b7c1d8e4f60a5b3c9d2e7f1a4b8
RAILS_MASTER_KEY = a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6
RAILS_MASTER_KEY: "8c4d2e1f9a3b7c5d6e0f1a2b3c4d5e6f"
rails_master_key: bbfeef5bedd12d45078725d8bf1a7e33
RAILS_MASTER_KEY=bbfeef5bedd12d45078725d8bf1a7e33 bin/rails credentials:edit
heroku config:set RAILS_MASTER_KEY=a895530f14add56693da9a6dbfd3cf97