Credential Leakage

Overview

Credential leakage occurs when reusable authentication or authorization material becomes accessible outside its intended control boundary. Sources include source repositories, logs, browser storage, screenshots, support tickets, backups, malware, misconfigured storage, phishing, and insecure messaging.

A leaked credential may remain dangerous even without confirmed misuse, especially when it has broad scope, long validity, or access to production. Deleting the visible copy does not invalidate versions already cloned, cached, indexed, or collected by an attacker.

Response requires revoking or rotating the credential, invalidating sessions, reviewing dependent secrets, investigating use, and correcting the exposure path. Prevention includes secret scanning, managed vaults, short-lived identities, least privilege, and avoiding credentials in ordinary application data.

Credential leakage is the unintended exposure of passwords, keys, tokens, certificates, or secrets to unauthorized people, systems, or locations. A leaked credential must be revoked or rotated immediately; removing the exposed copy cannot make an already copied secret safe.

For Credential Leakage, the trust decision should establish the unintended exposure of passwords, keys, tokens, certificates, or secrets to unauthorized people, systems, or locations and bind the result to the requested action and protected resource. Teams should test issuance, storage, validation, expiry, revocation, recovery, and privileged override for unintended exposure of passwords, keys, and tokens, rather than checking only a successful request. Logs concerning the Credential Leakage context and unintended exposure of passwords, keys, and tokens should support investigation without exposing reusable secrets or unnecessary personal data.

Review of Credential Leakage should compare permitted and rejected actions related to unintended exposure of passwords, keys, and tokens, confirm that recovery cannot bypass the primary safeguard, and remove obsolete access promptly.