WEB-INF/web.xml displays mysql credentials?

Question

I found web.xml in /WEB-INF/ on a domain I'm associated with. In said xml file, I see it displays:

<database>
    <jndi-name>jdbc/mysql</jndi-name>
    <driver> 
        <type>com.mysql.jdbc.jdbc2.optional.MysqlConnectionPoolDataSource</type> 
        <url>jdbc:mysql://127.0.0.1:3306/[domainWasHere]</url>
        <user>[userWasHere]</user>
        <password>[passWasHere]</password>
    </driver>
</database>

could this be vital information in the wrong hands?

Answer 1

Yes, it could be - assuming the file was accessible externally, and that the server contains important data, and that the credentials were valid for an account with permissions to do damage; on the other hand, it could be perfectly innocuous.