Neo4j Credentials

Description

General

Documentation: https://neo4j.com/docs/getting-started/current/
Summary: Neo4j is a graph database. This detector aims at finding Neo4j credentials in the form of a tuple (host, username, password) or (host, username, password, port) . Such tuples can be used to access and run operations on the database instance.
IPs allowlist: This can be implemented directly on the instance of the Neo4j database.
Scopes: Neo4j supports RBAC (Role-Based access control) to govern access to the system by the users (read, write and administer). A variety of roles can be attributed to users. Please refer to the documentation for more details.

Revoke the secret

Authentication and authorization aspects can be managed by database administrators. For instance, users with appropriate privileges can also change their own passwords. Read this documentation on changing passwords for more details.

Check for suspicious activity

Database access logs can be stored and audited on the server side to investigate suspicious activities; however, this is only available with the Enterprise Edition.

Details for `Neo4j credentials assignment`

Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 3
Occurrences found for one million commits: 3.1
Prefixed: False
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - neo4j

Examples

- text: |
    spring.data.neo4j.url: bolt://gg.neo4j.app/
    spring.data.neo4j.username: zefza
    spring.data.neo4j.password: zeoh!zafFEa
  host: bolt://gg.neo4j.app
  username: zefza
  password: zeoh!zafFEa

- text: |
    url: neo4j+s://gg.neo4j.app/
    neo4j_username: zefza
    neo4j_password: zeoh!zafFEa
  host: neo4j+s://gg.neo4j.app
  username: zefza
  password: zeoh!zafFEa

- text: |
    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io
    username_neo4j: zefza
    password_neo4j: zeoh!zafFEa
  host: neo4j+s://ec1eb551.databases.neo4j.io
  username: zefza
  password: zeoh!zafFEa

Details for `Neo4j credentials assignment attached port`

Family: Database
Category: Data storage
Company: Neo4j
High recall: False
Validity check available: False
Minimum number of matches: 4
Occurrences found for one million commits: 0.01
Prefixed: False
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - neo4j

Examples

- text: |
    spring.data.neo4j.url: bolt://gg.neo4j.app:7676
    spring.data.neo4j.username: zabze
    spring.data.neo4j.password: zeoh!zecZEr
  host: bolt://gg.neo4j.app
  port: '7676'
  username: zabze
  password: zeoh!zecZEr

- text: |
    url: neo4j+s://gg.neo4j.app:80
    neo4j_username: zabze
    neo4j_password: zeoh!zecZEr
  host: neo4j+s://gg.neo4j.app
  port: '80'
  username: zabze
  password: zeoh!zecZEr

- text: |
    url_neo4j: neo4j+s://ec1eb551.databases.neo4j.io:9797
    username_neo4j: zabze
    password_neo4j: zeoh!zecZEr
  host: neo4j+s://ec1eb551.databases.neo4j.io
  port: '9797'
  username: zabze
  password: zeoh!zecZEr