3648310 - Guidance on rotating keys for credentials exposed in vcap_services environment variable in SAP Integration Suite

• Credentials from the VCAP_SERVICES environment variable were exported from a DEV tenant of Cloud Integration, saved to a JSON file, and accidentally added to version control, exposing them for long time period.
• The exposed credentials include two services that need to be rotated, but they do not appear in the SAP Cockpit.
• The potential misuse of x509 keys and the impact on service instances in the SAP Integration Suite.

• SAP Integration Suite
• SAP Business Technology Platform

vcap_services, sap integration suite, rotate keys, binding secrets, exposed credentials, sap btp, cloud integration, x509 keys, unbind rebind, service instance, security risk , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem