47 lines
1.2 KiB
Plaintext
47 lines
1.2 KiB
Plaintext
|
include::../../../shared_content/secrets/description.adoc[]
|
||
|
|
|
||
|
|
== Why is this an issue?
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/rationale.adoc[]
|
||
|
|
|
||
|
|
=== What is the potential impact?
|
||
|
|
|
||
|
|
PlanetScale Database passwords are used to authenticate users against the
|
||
|
|
database engine. They are associated with user accounts that are granted
|
||
|
|
specific permissions over the database and its hosted data.
|
||
|
|
|
||
|
|
Below are some real-world scenarios that illustrate some impacts of an attacker
|
||
|
|
exploiting the secret.
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/data_compromise.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/security_downgrade.adoc[]
|
||
|
|
|
||
|
|
== How to fix it
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/revoke.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/recent_use.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/vault.adoc[]
|
||
|
|
|
||
|
|
=== Code examples
|
||
|
|
|
||
|
|
:example_secret: pscale_pw_hatgoG_EprhgnblWotaJGbeOeFE7q9BwW0_g5ML486D
|
||
|
|
:example_name: planetscale_password
|
||
|
|
:example_env: PLANETSCALE_PASSWORD
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/examples.adoc[]
|
||
|
|
|
||
|
|
//=== How does this work?
|
||
|
|
|
||
|
|
//=== Pitfalls
|
||
|
|
|
||
|
|
//=== Going the extra mile
|
||
|
|
|
||
|
|
== Resources
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/resources/standards.adoc[]
|
||
|
|
|
||
|
|
//=== Benchmarks
|