Property
Languageregex
Severitylow
CWECWE-798: Use of Hard-coded Credentials
OWASPA07:2021 - Identification and Authentication Failures
Confidence LevelLow
Impact LevelMedium
Likelihood LevelLow

Description#

A Sauce Labs access token appears to be hard-coded or exposed in the codebase. Storing sensitive credentials like this in code makes them easily accessible to anyone with code access.

Impact#

If an attacker obtains this token, they could gain unauthorized access to your Sauce Labs account, potentially running, modifying, or deleting automated tests and data. This could lead to data leaks, service misuse, or disruptions to your CI/CD workflow.