Neo4j Credentials
#
Description#
General- Documentation: https://neo4j.com/docs/getting-started/current/
- Summary: Neo4j is a graph database. This detector aims at finding Neo4j credentials in the form of a tuple (host, username, password) or (host, username, password, port) . Such tuples can be used to access and run operations on the database instance.
- IPs allowlist: This can be implemented directly on the instance of the Neo4j database.
- Scopes: Neo4j supports RBAC (Role-Based access control) to govern access to the system by the users (read, write and administer). A variety of roles can be attributed to users. Please refer to the documentation for more details.
#
Revoke the secretAuthentication and authorization aspects can be managed by database administrators. For instance, users with appropriate privileges can also change their own passwords. Read this documentation on changing passwords for more details.
#
Check for suspicious activityDatabase access logs can be stored and audited on the server side to investigate suspicious activities; however, this is only available with the Enterprise Edition.
Neo4j credentials assignment
#
Details for Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 3
Occurrences found for one million commits: 0.04
Prefixed: False
PreValidators:
- type: ContentWhitelistPreValidator patterns: - neo4j
#
Examples- text: >- spring.data.neo4j.url: bolt://gg.neo4j.app/ spring.data.neo4j.username: zefze spring.data.neo4j.password: zeoh!zefZEx host: bolt://gg.neo4j.app username: zefze password: zeoh!zefZEx
- text: >- url: neo4j+s://gg.neo4j.app/ username: zefze password: zeoh!zefZEx host: neo4j+s://gg.neo4j.app username: zefze password: zeoh!zefZEx
- text: >- url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io username_neo4j: zefze password_neo4j: zeoh!zefZEx host: neo4j+s://ec1eb551.databases.neo4j.io username: zefze password: zeoh!zefZEx
Neo4j credentials assignment attached port
#
Details for Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 4
Occurrences found for one million commits: 0.01
Prefixed: False
PreValidators:
- type: ContentWhitelistPreValidator patterns: - neo4j
#
Examples- text: >- spring.data.neo4j.url: bolt://gg.neo4j.app:7676 spring.data.neo4j.username: zefze spring.data.neo4j.password: zeoh!zefZEx host: bolt://gg.neo4j.app port: "7676" username: zefze password: zeoh!zefZEx
- text: >- url: neo4j+s://gg.neo4j.app:80 username: zefze password: zeoh!zefZEx host: neo4j+s://gg.neo4j.app port: "80" username: zefze password: zeoh!zefZEx
- text: >- url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io:9797 username_neo4j: zefze password_neo4j: zeoh!zefZEx host: neo4j+s://ec1eb551.databases.neo4j.io port: "9797" username: zefze password: zeoh!zefZEx