Skip to main content

Neo4j Credentials

Description#

General#

  • Documentation: https://neo4j.com/docs/getting-started/current/
  • Summary: Neo4j is a graph database. This detector aims at finding Neo4j credentials in the form of a tuple (host, username, password) or (host, username, password, port) . Such tuples can be used to access and run operations on the database instance.
  • IPs allowlist: This can be implemented directly on the instance of the Neo4j database.
  • Scopes: Neo4j supports RBAC (Role-Based access control) to govern access to the system by the users (read, write and administer). A variety of roles can be attributed to users. Please refer to the documentation for more details.

Revoke the secret#

Authentication and authorization aspects can be managed by database administrators. For instance, users with appropriate privileges can also change their own passwords. Read this documentation on changing passwords for more details.

Check for suspicious activity#

Database access logs can be stored and audited on the server side to investigate suspicious activities; however, this is only available with the Enterprise Edition.

Details for Neo4j credentials assignment#

  • Family: Database

  • Category: Data storage

  • Company: Neo4j

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 3

  • Occurrences found for one million commits: 0.04

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - neo4j

Examples#

- text: |    spring.data.neo4j.url: bolt://gg.neo4j.app/    spring.data.neo4j.username: zefza    spring.data.neo4j.password: zeoh!zafFEa  host: bolt://gg.neo4j.app  username: zefza  password: zeoh!zafFEa
- text: |    url: neo4j+s://gg.neo4j.app/    neo4j_username: zefza    neo4j_password: zeoh!zafFEa  host: neo4j+s://gg.neo4j.app  username: zefza  password: zeoh!zafFEa
- text: |    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io    username_neo4j: zefza    password_neo4j: zeoh!zafFEa  host: neo4j+s://ec1eb551.databases.neo4j.io  username: zefza  password: zeoh!zafFEa

Details for Neo4j credentials assignment attached port#

  • Family: Database

  • Category: Data storage

  • Company: Neo4j

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 4

  • Occurrences found for one million commits: 0.01

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - neo4j

Examples#

- text: |    spring.data.neo4j.url: bolt://gg.neo4j.app:7676    spring.data.neo4j.username: zabze    spring.data.neo4j.password: zeoh!zecZEr  host: bolt://gg.neo4j.app  port: "7676"  username: zabze  password: zeoh!zecZEr
- text: |    url: neo4j+s://gg.neo4j.app:80    neo4j_username: zabze    neo4j_password: zeoh!zecZEr  host: neo4j+s://gg.neo4j.app  port: "80"  username: zabze  password: zeoh!zecZEr
- text: |    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io:9797    username_neo4j: zabze    password_neo4j: zeoh!zecZEr  host: neo4j+s://ec1eb551.databases.neo4j.io  port: "9797"  username: zabze  password: zeoh!zecZEr