Neo4j Credentials
#
Description#
General- Documentation: https://neo4j.com/docs/getting-started/current/
- Summary: Neo4j is a graph database. This detector aims at finding Neo4j credentials in the form of a tuple (host, username, password) or (host, username, password, port) . Such tuples can be used to access and run operations on the database instance.
- IPs allowlist: This can be implemented directly on the instance of the Neo4j database.
- Scopes: Neo4j supports RBAC (Role-Based access control) to govern access to the system by the users (read, write and administer). A variety of roles can be attributed to users. Please refer to the documentation for more details.
#
Revoke the secretAuthentication and authorization aspects can be managed by database administrators. For instance, users with appropriate privileges can also change their own passwords. Read this documentation on changing passwords for more details.
#
Check for suspicious activityDatabase access logs can be stored and audited on the server side to investigate suspicious activities; however, this is only available with the Enterprise Edition.
Neo4j credentials assignment
#
Details for Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 3
Occurrences found for one million commits: 0.04
Prefixed: False
PreValidators:
- type: ContentWhitelistPreValidator patterns: - neo4j
#
Examples- text: | spring.data.neo4j.url: bolt://gg.neo4j.app/ spring.data.neo4j.username: zefza spring.data.neo4j.password: zeoh!zafFEa host: bolt://gg.neo4j.app username: zefza password: zeoh!zafFEa
- text: | url: neo4j+s://gg.neo4j.app/ neo4j_username: zefza neo4j_password: zeoh!zafFEa host: neo4j+s://gg.neo4j.app username: zefza password: zeoh!zafFEa
- text: | url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io username_neo4j: zefza password_neo4j: zeoh!zafFEa host: neo4j+s://ec1eb551.databases.neo4j.io username: zefza password: zeoh!zafFEa
Neo4j credentials assignment attached port
#
Details for Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 4
Occurrences found for one million commits: 0.01
Prefixed: False
PreValidators:
- type: ContentWhitelistPreValidator patterns: - neo4j
#
Examples- text: | spring.data.neo4j.url: bolt://gg.neo4j.app:7676 spring.data.neo4j.username: zabze spring.data.neo4j.password: zeoh!zecZEr host: bolt://gg.neo4j.app port: "7676" username: zabze password: zeoh!zecZEr
- text: | url: neo4j+s://gg.neo4j.app:80 neo4j_username: zabze neo4j_password: zeoh!zecZEr host: neo4j+s://gg.neo4j.app port: "80" username: zabze password: zeoh!zecZEr
- text: | url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io:9797 username_neo4j: zabze password_neo4j: zeoh!zecZEr host: neo4j+s://ec1eb551.databases.neo4j.io port: "9797" username: zabze password: zeoh!zecZEr