Oracle Credentials detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_379
Category	Secrets
Severity	HIGH
Framework	Git

Impact

An Oracle JDBC connection string containing embedded database credentials (username and password). These credentials provide direct access to Oracle Database instances. If leaked, an attacker could connect to the database, read or modify sensitive data, escalate privileges, or disrupt database operations. Commonly found in application configuration files, environment variables, and source code.

How to Fix

Revoke the Oracle Credentials immediately. Review all access logs for unauthorized activity. Generate a new credential and implement proper secret management and rotation policies.