Back to Checks
e2enetworks

E2E Networks database clusters do not use the default admin username

database_cluster_default_admin_username
Service: databaseSeverity: medium
OfficialBuilt-inVerified
Resource Type:NotDefined

E2E Networks database clusters should be configured with a custom administrative username instead of the well-known default, reducing the predictability of privileged credentials.

Prowler logoProwlerprowler-provider-e2enetworks

Risk

Default admin usernames are publicly known, so they increase exposure to credential guessing and brute-force attacks against the privileged database account.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler e2enetworks --checks database_cluster_default_admin_username

Recommendation

Replace the default administrative username on database clusters with a unique, non-default account name and rotate the associated credentials.

Check Code

from prowler.lib.check.models import Check, CheckReportE2eNetworks
from prowler.providers.e2enetworks.services.database.database_client import (
    database_client,
)


class database_cluster_default_admin_username(Check):
    """Check if E2E Networks database clusters do not use the default admin username."""

    def execute(self) -> list[CheckReportE2eNetworks]:
        findings = []
        for cluster in database_client.clusters:
            report = CheckReportE2eNetworks(metadata=self.metadata(), resource=cluster)
            report.status = "PASS"
            report.status_extended = f"Database cluster {cluster.name} does not use the default admin username."
            if cluster.master_username.lower() == "admin":
                report.status = "FAIL"
                report.status_extended = (
                    f"Database cluster {cluster.name} uses the default admin username."
                )
            findings.append(report)
        return findings

References