Skip to main content

Neo4j Credentials

Description#

General#

  • Documentation: https://neo4j.com/docs/getting-started/current/
  • Summary: Neo4j is a graph database. This detector aims at finding Neo4j credentials in the form of a tuple (host, username, password) or (host, username, password, port) . Such tuples can be used to access and run operations on the database instance.
  • IPs allowlist: This can be implemented directly on the instance of the Neo4j database.
  • Scopes: Neo4j supports RBAC (Role-Based access control) to govern access to the system by the users (read, write and administer). A variety of roles can be attributed to users. Please refer to the documentation for more details.

Revoke the secret#

Authentication and authorization aspects can be managed by database administrators. For instance, users with appropriate privileges can also change their own passwords. Read this documentation on changing passwords for more details.

Check for suspicious activity#

Database access logs can be stored and audited on the server side to investigate suspicious activities; however, this is only available with the Enterprise Edition.

Details for Neo4j credentials assignment#

  • Family: Database

  • Category: Data storage

  • Company: Neo4j

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 3

  • Occurrences found for one million commits: 0.04

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - neo4j

Examples#

- text: >-    spring.data.neo4j.url: bolt://gg.neo4j.app/    spring.data.neo4j.username: zefze    spring.data.neo4j.password: zeoh!zefZEx  host: bolt://gg.neo4j.app  username: zefze  password: zeoh!zefZEx
- text: >-    url: neo4j+s://gg.neo4j.app/    username: zefze    password: zeoh!zefZEx  host: neo4j+s://gg.neo4j.app  username: zefze  password: zeoh!zefZEx
- text: >-    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io    username_neo4j: zefze    password_neo4j: zeoh!zefZEx  host: neo4j+s://ec1eb551.databases.neo4j.io  username: zefze  password: zeoh!zefZEx

Details for Neo4j credentials assignment attached port#

  • Family: Database

  • Category: Data storage

  • Company: Neo4j

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 4

  • Occurrences found for one million commits: 0.01

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - neo4j

Examples#

- text: >-    spring.data.neo4j.url: bolt://gg.neo4j.app:7676    spring.data.neo4j.username: zefze    spring.data.neo4j.password: zeoh!zefZEx  host: bolt://gg.neo4j.app  port: "7676"  username: zefze  password: zeoh!zefZEx
- text: >-    url: neo4j+s://gg.neo4j.app:80    username: zefze    password: zeoh!zefZEx  host: neo4j+s://gg.neo4j.app  port: "80"  username: zefze  password: zeoh!zefZEx
- text: >-    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io:9797    username_neo4j: zefze    password_neo4j: zeoh!zefZEx  host: neo4j+s://ec1eb551.databases.neo4j.io  port: "9797"  username: zefze  password: zeoh!zefZEx