Paypal secrets found in logs

firetail:insight-paypal-secrets-in-logs.

Type:

Detection

Rule Severity:

Info

Tokens that match the format for Paypal secret keys were found in the logs of the affected API.

PayPal secrets refer to sensitive credentials used for authentication and API access with PayPal services. These include API keys, client secrets, or access tokens that are critical for secure communication between your application and PayPal’s servers.

Remediation

Paypal secret keys should not be transmitted over the network. Review the logs in question and verify that the transmission of secrets is happening in accordance with your security policies.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings
Majority response status codes 3XX
SSL vulnerabilities detected
AWS ALB listeners should be configured with a strong security policy
Average combined header size reduced
AppSync GraphQL API resolver count limit not set
AppSync GraphQL API query depth limit not set