Skip to content

Avoid using plain text credentials

Info

ID: MS-M9026
MITRE mitigation: -

Avoid using plain text credentials in configuration files. Use Kubernetes secrets or cloud secret store instead. This prevents unwanted access to plaintext credentials in source code, configuration files and Kubernetes objects.

Techniques Addressed by Mitigation

ID Name Use
MS-TA9027 Application credentials in configuration files Avoid using plain text credentials in Kubernetes configuration