Secret at Rest

A credential, key or token stored on disk or in configuration rather than held only in memory. Application config files commonly hold secrets at rest in plaintext so the program can use them, which makes them a high-value target for any file-read vulnerability.