logo

Database

Finicity Api Key

Description

The source code repository contains sensitive information: Finicity API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Finicity API Key patterns in source code and configuration files

Vulnerable code example

FINICITY_PARTNER_ID=8807837607559
FINICITY_PARTNER_SECRET=8k2WKDUOoDbQPj3kMMsj
FINICITY_APP_KEY=f73cc74b187d4c2f63ac975d347d9fe9
curl -X POST https://api.finicity.com/aggregation/v2/partners/authentication \
  -H 'Finicity-App-Key: 2ef864e4815ba672a2ee16462200d421'
headers = {"Finicity-App-Key": "77BF6D4F2377DE2702220A8CBCE89E71", "Accept": "application/json"}
# Finicity open banking
appKey: '7f5c4a108fa9b89e7ec60cebd2443c98'...