logo

Database

Wiz Secret Key

Description

The source code repository contains sensitive information: Wiz Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Wiz Secret Key patterns in source code and configuration files

Vulnerable code example

WIZ_CLIENT_SECRET=f5mSaR1HBnDpxkmBknka31xvzb67utNfWAR9HI72i89dPDPFRrtwEsim9YXODJPW
export WIZ_AUTH_CLIENT_SECRET="FJp2fUhyoLnwAgd50tne4ggDz40HcK4I2UwmxNCn2efaZVefAJZb3ftWtsNOYbi7"
wiz_auth_client_secret = "WDk2VpyhcWuE59NfUgynsolyQh3DAgBI2NjqgwcBrjXtawY5HFlxRlAlJv88Oud1"
wizClientSecret: 'f5mSaR1HBnDpxkmBknka31xvzb67utNfWAR9HI72i89dPDPFRrtwEsim9YXODJPW'
helm install wiz-sensor wiz-sec/wiz-sensor --set wizApiToken.clientToken=FJp2fUhyoLnwAgd50tne4ggDz40HcK4I2UwmxNCn2efaZVefAJZb3ftWtsNOYbi7