Spring Boot Actuator
Spring Boot Actuator exposed without security. /actuator/env dumps environment including DB password.
{
"activeProfiles": ["production"],
"propertySources": [{"name":"systemEnvironment","properties":{
"DB_PASSWORD":{"value":"2af4e46d4f5c3b36"},
"JWT_SECRET":{"value":"ddff310b850794b0a4582285375ef4cf00447c82cc88a513"},
"AWS_SECRET_ACCESS_KEY":{"value":"7a1305d78b92ddcca83149a60951f7d480d3d255"}
}}]
}