logo

Database

Azure Web Pubsub Connection String

Description

The source code repository contains sensitive information: Azure Web PubSub Connection String

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Azure Web PubSub Connection String patterns in source code and configuration files

Vulnerable code example

Endpoint=https://contoso-chat.webpubsub.azure.com;AccessKey=GPzEyoL8EsaJd/wyXxQPplH8ACyjkz4jmBQlm7knI4p=;Version=1.0;
"WebPubSubForSocketIOConnectionString": "Endpoint=https://live-sio.webpubsub.azure.com;AccessKey=ShZFC8ZrXbeg/fT3pG+h8msMlc+T1ah9sdbEl7oX8nr=;Version=1.0;"
WEBPUBSUB_CONNECTION_STRING="endpoint=https://notify.webpubsub.azure.cn;accesskey=EHAluvtdgDW1+In81LJK6yc+jecsblnAk2vnXK6+Zy2=;version=1.0;"
Endpoint=https://ops.webpubsub.azure.us; Port=443; ClientEndpoint=https://gw.contoso.com; AccessKey=GKlPOyJV9YZGWNkJnsrUgBhcpqIuRhWlMkU6ag5t/Zj=; Version=1.0;
service = WebPubSubServiceClient.from_connection_string("Endpoint=https://pubsub-prod.webpubsub.azure.com;AccessKey=jhCS6jkdFKsvw8f46QqXYilvBSbELgGOBomUOLc877EgNB6bfbdUwFDrzIe3mGxHoL43ScQQYK8TUkl1JYnr;Version=1.0;", hub="chat")
const serviceClient = new WebPubSubServiceClient('Endpoint=https://dash.webpubsub.azure.com;AccessKey=3aoeWqeHGwlifXjw9APP8Dy+3XzZmBNQR2yTBGTCuSs=', 'notifications');