Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity | |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
A New Relic User API key has been found hard-coded in the source code. Storing credentials directly in code can expose them to anyone with access to the repository, increasing the risk of unauthorized access.
Impact#
If this API key is leaked, attackers could access sensitive application performance data or manipulate New Relic services, potentially leading to data breaches, service disruption, or unexpected costs for your organization.