-
Notifications
You must be signed in to change notification settings - Fork 19
Security-related question about a possible exposed credential #69
Copy link
Copy link
Open
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
- a real credential, or
- a placeholder / example value?
Thank you for your time.
Code snippet (sensitive values masked):
status=False
reg_exp= self.move_chunks_regex()
for key in self.ora_env_dict.keys():
if(reg_exp.match(key)):
gsmhost=self.ora_env_dict["ORACLE_HOSTNAME"]
cadmin=self.ora_env_dict["SHARD_ADMIN_USER"]
cpasswd="HIDD****TRING"
gsmlogin='''{0}/bin/gdsctl'''.format(self.ora_env_dict["ORACLE_HOME"])
move_chunks_status=None
shard_db,shard_pdb=self.process_chunks_vars(key)
shard_name = '''{0}_{1}'''.format(shard_db,shard_pdb)
shard_num = self.count_online_shards()
online_shard = self.check_online_shard(shard_name)
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels