The service always supports database users authenticated by a username and password that the user creates and manages.
DB Self Managed Credentials
CCC.RDMS.CP07
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.TH01 | Unauthorized Access via Default Credentials | If default credentials are not disabled or changed, unauthorized access may be gained to the RDMS environment. This may lead to data breaches, data manipulation, or overall compromise of the database instance. |
| CCC.RDMS.TH02 | Brute Force Attempts on Database Authentication | Repeated attempts to guess database user passwords may be made through brute force techniques. This condition could result in unauthorized access if successful, compromising database security and sensitive information. Attempts arrive over whichever IPv4 or IPv6 endpoint the network access rules leave reachable. |
| CCC.RDMS.TH07 | Excessive Privileges are Granted Within the Database | Database roles and grants inside the engine may be configured more broadly than required, such as application users holding administrative roles or schemas readable by every login. Any authenticated user can then read or modify data beyond their function, impacting the confidentiality and integrity of all data in the instance. |
| CCC.RDMS.TH08 | Long-lived Database Credentials are Exposed | Static usernames and passwords may be stored in application configuration, connection strings, or source repositories and remain valid for long periods. When such a credential is disclosed it can be reused by an unauthorized party until it is rotated, impacting the confidentiality and integrity of the database. |