logo

Database

Db2 Password

Description

The source code repository contains sensitive information: DB2 Password

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches DB2 Password patterns in source code and configuration files

Vulnerable code example

DATABASE=sample;HOSTNAME=db2.example.com;PORT=50000;PROTOCOL=TCPIP;UID=db2inst1;PWD=Xq7vR2mK9pLw;
DRIVER={IBM DB2 ODBC DRIVER};DATABASE=sample;HOSTNAME=10.0.0.5;PORT=50000;PROTOCOL=TCPIP;UID=app;PWD=Tz4nB8cQ1sVy;
Provider=IBMDADB2;Database=sample;Hostname=db2.local;Protocol=TCPIP;Port=50000;Uid=svc;Pwd=Hk3dW9fP2xNa;
DATABASE=BLUDB;HOSTNAME=abc.databases.appdomain.cloud;PORT=30376;PROTOCOL=TCPIP;UID=u1;PWD=Rm6tJ1gZ8wQe;Security=SSL;
String url = "jdbc:db2://db2.example.com:50000/SAMPLE:user=db2inst1;password=Wv5cN2kL8rTy;";
jdbc:db2://db2.example.com:50000;DatabaseName=SAMPLE;user=app;password=Bk2nX7pQ4vWd;
db.url=jdbc:db2://google.com/dev
db.port=50003...