Sensitive Data Exposure – Devise Secret Key
Summary#
Invicti detected various secrets such as API keys, database credentials, and/or cryptographic secrets. These secrets should be kept secret for security, but sometimes JavaScript files, error messages, etc. are leaked through.
Impact#
Depending on the leaked secret, an attacker can perform one of the following types of attacks successfully:
Bypass Authorization
Unauthorized Access
Credentials Leakage
Remediation#
It is recommended to revoke leaked secrets. Investigate and resolve the source of the leak. Hard-coded Secrets can be accidentally released to the public. Don't store these secrets on the application tree. Find the source of the leak and make sure it's disabled.
Remedy References#
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Related Vulnerabilities
