practicalli / practicalli/clojure-web-services
DBeaver - local passwords
Open
Nobody has claimed this yet.
database
- Dominant language
- Markdown
- Stars
- 16
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
The DBeaver database tool can store passwords locally. This file is encrypted and can be decrypted using the following openssl command and the dbeaver key taken from the source code.
openssl aes-128-cbc -d -K babb4a9f774ab853c96c2d653dfe544a -iv 00000000000000000000000000000000 -in dbeaver-connections.json | dd bs=1 skip=16 2>/dev/null
On a linux system the local password file can be found at
~/.local/share/DBeaverData/workspace6/General/.dbeaver/credentials-config.json
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the reported credentials-config.json path and the supplied OpenSSL command to verify the claimed local-password exposure. The issue does not identify a target file in this repository or a proposed remediation, so completion would require agreeing on the security change and its validation criteria.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100