ODBC Connection String

Description

General

• Documentation: https://www.connectionstrings.com/
• Summary: ODBC is a standard application programming interface for accessing database management systems. This standard is independent of the targeted database system thanks to drivers converting API calls into the logic of the underlying system. To authenticate, the user must specify a hostname, a username and a password. These credentials are sensitive since they can give access to various data.
• IPs allowlist: This is feature is not supported
• Scopes: ODBC connection strings are composed of user credentials and a database address. The scope of the connection strings hence depends on the user's permissions on the targeted database.

Revoke the secret

ODBC connection strings can not be revoked, however the user credentials detailed in the connection strings can be revoked if the underlying database supports such feature.

Check for suspicious activity

Suspicious activity can be monitored if its part of the features of the database that the ODBC is linked to.

Details for Odbc connection string

• Family: Database

• Category: Data storage

• High recall: False

• Validity check available: False

• Minimum number of matches: 4

• Occurrences found for one million commits: 200.36

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - data( ?source|base)
    - connectionstring
    - postgres
    - odbc
    - jdbc
    - sql
    - hostname

Examples

- text: |
    CONNECTION_STRING="data source=google.com;Port=5434;Initial Catalog=colegioar;Persist Security Info=True;User ID=postgres;Password=m72bnos2wf;application name=EntityFramework"
  host: google.com
  port: '5434'
  username: postgres
  password: m72bnos2wf
  connection_string: data source=google.com;Port=5434;Initial Catalog=colegioar;Persist Security Info=True;User ID=postgres;Password=m72bnos2wf;application name=EntityFramework

- text: |
    CONNECTION_STRING="data source=google.com,5434;Initial Catalog=colegioar;User ID=postgres;Password=m72bnos2wf;application name=EntityFramework"
  host: google.com
  port: '5434'
  username: postgres
  password: m72bnos2wf
  connection_string: data source=google.com,5434;Initial Catalog=colegioar;User ID=postgres;Password=m72bnos2wf;application name=EntityFramework

- text: |
    spring.datasource.url=jdbc:sqlserver://google.com:1433;user=begen;password=zjejc;
  host: google.com
  port: '1433'
  username: begen
  password: zjejc
  connection_string: url=jdbc:sqlserver://google.com:1433;user=begen;password=zjejc;