Access Control: Default MSSQL Credentials¶

Identifier: mssql_default_credentials

Scanner(s) Support¶

Description¶

Check if the MSSQL server accepts default credentials.

MSSQL servers configured with default credentials are vulnerable to unauthorized access, which can lead to data breaches and system compromise.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  mssql_default_credentials:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

assets_allowed¶

Type : List[AssetType]*

List of assets that this check will cover.

skip¶

Type : boolean

Skip the test if true.