Skip to content

JDBC (DB Connection String)

Service Name: JDBC Database Connection

Service Description: JDBC (Java Database Connectivity) is a Java API that allows Java programs to connect to various database management systems using connection strings that contain authentication credentials.

Service Address: Various database servers

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants direct access to database resources with the privileges of the authenticated user.

Secret Revokement URL: Does not exist

Secret Example: jdbc:mysql://hostname:3306/database?user=username&password=password123

Suspicious Activity Investigation Instructions:

  • Check database access logs for unusual query patterns or excessive data retrieval.
  • Monitor for unauthorized schema changes or table modifications.
  • Look for unusual login times or locations in database audit logs.
  • Review application logs for unexpected database connection attempts.
  • Check for unusual data export operations or bulk data transfers.

Mitigation Instructions:

  • Immediately change the database user password.
  • Revoke and rotate any compromised credentials.
  • Review database user permissions and apply the Principle of Least Privilege.
  • Enable IP restrictions on database access if possible.
  • Implement connection pooling and timeout policies.
  • Consider implementing database activity monitoring.
  • Update connection strings in application configuration files.