logo

Database

Azure Relay Access Key

Description

The source code repository contains sensitive information: Azure Relay Access Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Azure Relay Access Key patterns in source code and configuration files

Vulnerable code example

Endpoint=sb://contoso-hybrid.servicebus.windows.net/;SharedAccessKeyName=RootManageSharedAccessKey;SharedAccessKey=5ZgppZyLAxEnipKRMvLlQfVEvUuV1EaFG+ARmAkmIjB=
Endpoint=sb://onprem-bridge.servicebus.windows.net/;SharedAccessKeyName=SendOnly;SharedAccessKey=4x/Q+oJDlJ/33svq4UT4UETX4AJxjQMKX+ARmALVIel=;EntityPath=orders
RELAY_KEY="jqrxDwVKtDQwpLiQq4uQZG1uAEziyxgi8+ARmIklwrX="
var tokenProvider = TokenProvider.CreateSharedAccessSignatureTokenProvider("listen", "vI9pimcod2xOvC7p/gZs93rVqZFEm6FGy+ARmBuviiT=");