Ldap Password

Description

The source code repository contains sensitive information: LDAP Password

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches LDAP Password patterns in source code and configuration files

Vulnerable code example

ldap://cn=admin,dc=example,dc=com:[email protected]:389
ldaps://uid=svc,ou=users,dc=corp,dc=com:[email protected]:636
ldap://cn=bind,dc=internal,dc=org:[email protected]:389/dc=internal,dc=org
LDAP://cn=admin,dc=example,dc=com:[email protected]:389
LDAPS://uid=svc,ou=users,dc=corp,dc=com:[email protected]:636
LDAP_URL = ldap://cn=admin,dc=example,dc=com:P4ssw0rdXyz9@host