No, a leaked credential should not be enough to get access to your database,