Use of Hard-coded Credentials

Property	Value
Language	regex
Severity
CWE	CWE-798: Use of Hard-coded Credentials
OWASP	A07:2021 - Identification and Authentication Failures
Confidence Level	Low
Impact Level	Medium
Likelihood Level	Low

Description

Zendesk API secret keys were found hard-coded in the source code. Storing credentials directly in code makes them easy to accidentally expose in version control or shared codebases.

Impact

If an attacker obtains these hard-coded Zendesk credentials, they could gain unauthorized access to your Zendesk account, potentially reading or modifying customer data, sending requests on your behalf, or disrupting support operations.