OOM Hardcoded Passwords List
TODO: Fill in blanks in password classification.
CAUTION: The following list contains passwords from OOM only.
CAUTION: The data is most probably incomplete.
Passwords from all values.yaml were scraped automatically (all those YAML keys that match case-insensitive regex ".*(pass|pwd|secret).*").
Passwords from non-"values.yaml"s were scraped using ripgrep (used regex was: "(pass|pwd|secret).*[=:>$'"]\S", case-insensitive and non-multiline) and then filtered manually. Usage in ONAP repos was analysed using Hound.
Simple visualisation of OOM-ONAP dependancies basing on data provided further (for the sake of readability passwords being used only in a single file or a single YAML key or those that I was unable to classify were ommited):
PDF above generated by following script (depeding on python-graphviz):
Data:
path | password | chart | code | comment |
pomba/charts/pomba-contextaggregator/resources/config/application.properties | 1234 | onap | UNGREPPABLE | |
portal.global.keypass | ,@{9!OOv%HO@#c+0Z}axu!xV | portal | NONE | |
sdnc.sdnc-portal.config.keystorePwd | ?w5!M;8v1XF;:Xd;g*%S$IY | sdnc | sdnc/oam | SSL key |
dmaap/components/dmaap-dr-node/resources/config/drNodeCadi.properties | )OBvCd{e{aWq.^mJJdX:S:1 | dmaap | integration/csit,dmaap/datarouter | |
dmaap/components/dmaap-dr-node/resources/config/node.properties | )OBvCd{e{aWq.^mJJdX:S:1 | dmaap | integration/csit,dmaap/datarouter | |
cds/charts/cds-blueprints-processor/resources/config/application.properties | {bcrypt}$2a$10$duaUzVUVW0YPQCSIbGEkQOXwafZGwQ/b32/Ys4R1iwSSawFgz7QNu | cds | ccsdk/cds | |
cds/charts/cds-controller-blueprints/resources/config/application.properties | {bcrypt}$2a$10$MJxhNiOAffxbyrV9.rrOUewP9Q/ASg5Nit2cmP.yBaXGsVXo8BW3y | cds | ccsdk/cds | |
dmaap/components/dmaap-dr-prov/resources/config/drProvCadi.properties | +mzf@J.D^;3!![*Xr.z$c#?b | dmaap | dmaap/datarouter,integration/csit | |
dmaap/components/dmaap-dr-prov/resources/config/provserver.properties | +mzf@J.D^;3!![*Xr.z$c#?b | dmaap | dmaap/datarouter,integration/csit | |
so/charts/so-bpmn-infra/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-catalog-db-adapter/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-catalog-db-adapter/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-catalog-db-adapter/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-sdc-controller/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-sdc-controller/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-vfc-adapter/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/charts/so-vnfm-adapter/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/resources/config/overrides/override.yaml | $2a$10$Fh9ffgPw2vnmsghsRD3ZauBL1aKXebigbq3BB1RPWtE62UDILsjke | so | so | |
so/resources/config/mso/mso-docker.json | 1ec0d74615d4e4639f991c0590c83b88 | so | so,integration/csit | |
aai.aai-elasticsearch.config.adminKeyStorePassword | 341274302a70ad691e12 | aai/aai-elasticsearch | NONE | |
so/resources/config/mso/mso-docker.json | 613AF3483E695524F9857643B697FA51C7A9A0951094F53791485BF3458F9EADA37DBACCCEBD0CB242B85B4062745247 | so | so,integration/csit,mso | |
so/resources/config/mso/mso-docker.json | 64AG2hF4pYeG2pq7CT6XwUOT | so | startup/message-router,appc,messagerouter/messageservice,integration/csit,so | |
portal/charts/portal-widget/resources/config/deliveries/properties/ONAPWIDGETMS/application.properties | 6APqvG4AU2rfLgCvMdySwQ== | portal | portal | after b64d non-ascii |
pomba/charts/pomba-contextaggregator/resources/config/builders/aai.properties | 70c87528c88dcd9f9c2558d30e817868 | pomba | aai | |
pomba/charts/pomba-contextaggregator/resources/config/builders/sdnc.properties | 70c87528c88dcd9f9c2558d30e817868 | pomba | aai | |
pomba/charts/pomba-contextaggregator/resources/config/builders/sdc.properties | 70c87528c88dcd9f9c2558d30e817869 | pomba | aai | |
pomba/charts/pomba-contextaggregator/resources/config/builders/ndcb.properties | 70c87528c88dcd9f9c2558d30e817870 | pomba | aai | |
dmaap/components/dmaap-bc/resources/config/dmaapbc.properties | 8bR5%l$l:@jSWz@FCs;rhY* | dmaap | dmaap | |
music.music-cassandra-job.cql.adminUser.passwordReplace | A2C4E6G8I0J2L4O6Q8S0U2W4Y6 | music/music-cassandra-job | NONE | |
sdc/resources/config/environments/AUTO.json | Aa1234%^! | sdc | sdc | |
portal.cassandra.config.cassandraPassword | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal/charts/portal-app/resources/config/deliveries/properties/ONAPPORTAL/system.properties | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal/charts/portal-widget/resources/config/deliveries/properties/ONAPWIDGETMS/application.properties | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal.portal-app.cassandra.config.cassandraPassword | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal.portal-cassandra.config.cassandraPassword | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal.portal-mariadb.config.mariadbRootPassword | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
portal.portal-sdk.cassandra.config.cassandraPassword | Aa123456 | portal | vvp,portal,aai/model-loader,appc,sdc,dcae-d,vid | |
aai.global.config.basic.auth.passwd | AAI | multicloud | UNGREPPABLE | |
multicloud.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-azure.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-fcaps.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-lenovo.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-ocata.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-pike.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-starlingx.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-vio.config.aai.password | AAI | multicloud | UNGREPPABLE | |
multicloud.multicloud-windriver.config.aai.password | AAI | multicloud | UNGREPPABLE | |
pomba.pomba-aaictxbuilder.config.aaiPassword | AAI | multicloud | UNGREPPABLE | |
pomba.pomba-sdncctxbuilder.config.aaiPassword | AAI | multicloud | UNGREPPABLE | |
pomba.pomba-servicedecomposition.config.aaiPassword | AAI | multicloud | UNGREPPABLE | |
aai/charts/aai-resources/resources/config/auth/aai_policy.json | aaiadmin | pomba | aai,integration | OBF:1u2a1t2v1vgb1s3g1s3m1vgj1t3b1u30 |
aai/charts/aai-modelloader/resources/config/model-loader.properties | aaiDomain2 | consul | aai | OBF:1i9a1u2a1unz1lr61wn51wn11lss1unz1u301i6o |
aai/charts/aai-sparky-be/resources/config/application-oxm-schema-prod.properties | aaiDomain2 | consul | aai | OBF:1i9a1u2a1unz1lr61wn51wn11lss1unz1u301i6o |
consul/resources/config/consul-agent-config/model-loader.properties | aaiDomain2 | consul | aai | OBF:1i9a1u2a1unz1lr61wn51wn11lss1unz1u301i6o |
portal/charts/portal-mariadb/resources/config/mariadb/oom_updates.sql | aaiui | aai | aai | 4LK69amiIFtuzcl6Gsv97Tt7MLhzo03aoOx7dTvdjKQ= |
aai.aai-sparky-be.config.portalPassword | aaiui | aai | aai | OBF:1t2v1vfv1unz1vgz1t3b |
aai/charts/aai-search-data/resources/config/elastic-search.properties | admin | UNGREPPABLE | UNGREPPABLE | OBF:1u2a1toa1w8v1tok1u30 |
appc.config.openStackEncryptedPassword | admin | UNGREPPABLE | UNGREPPABLE | |
consul.odl.jolokia.password | admin | UNGREPPABLE | UNGREPPABLE | odl |
contrib.netbox.netbox-app.config.superuserPassword | admin | UNGREPPABLE |