Skip to content

Information Disclosure: Leaked Mysql.Initial Config

Identifier: exposed_mysql_config

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

When MySQL configuration files are accidentally made public, attackers can view sensitive details like usernames, passwords, and connection info, potentially allowing unauthorized database access and data breaches.

How we test: We scan for exposed MySQL configuration files such as mysql.initial and analyze responses to detect if sensitive database credentials and connection information are accessible via web servers.

Configuration

Example

Example configuration:

---
security_tests:
  exposed_mysql_config:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.