A city CI server's service account allows interactive logon and uses a weak password. Why is that risky?
Select an answer to reveal the explanation.
Short Explanation
A CI service account with a soft password and desk-login rights is a VIP badge left on the cafeteria tray. Those accounts often touch source and deploy systems. Tighten the password, strip interactive logon, and treat them like the privileged identities they are.
Full Explanation
Service accounts frequently hold elevated rights across build, deploy, and infrastructure systems. Weak passwords make them attractive for credential attacks, while interactive logon expands how and where those credentials can be used or stolen. Hardening includes unique strong secrets or managed identities, denied interactive logon where possible, and least privilege. Linking service-account hygiene to common-service risk clarifies why pipeline identities deserve the same scrutiny as human admins.