CWE-1295: Debug Messages Revealing Unnecessary Information
The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.
A kind of CWE-215 Insertion of Sensitive Information Into Debugging Code.
From the CWE List. © The MITRE Corporation.
Newest
- apache jspwiki Apache JSPWiki: Error Handling - Reveals Error Details 7.5 High
- mcp-tool-shop-org backpropagate, @mcptoolshop/backpropagate +1 more Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication 9.3 Critical
- dormakaba registration unit 9002 UART Leaking Sensitive Data in dormakaba registration unit 9002 5.1 Medium
- fortinet fortiextender, fortiextender firmware +1 more A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0... 5.2 Medium
- medical informatics engineering enterprise health Medical Informatics Engineering Enterprise Health includes session token in debug output 4.6 Medium
- google chrome Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local... 6.2 Medium
- meon kyc solutions Detailed Error Response Vulnerability in Meon KYC solutions 6.9 Medium
- gitlab Debug Messages Revealing Unnecessary Information in GitLab 3.7 Low
- tla media gtm kit WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability 7.5 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +1 more +3 more Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda 6.5 Medium
- broadcom brocade sannav, brocade sannav +1 more Brocade SANnav encryption key is logged in the debug logs 8.6 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 more In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to... 3.9 Low
- red hat openshift container platform 4 Oauth-server-container: oauth-server-container logs client secret in debug level 4.9 Medium
- apache airflow Apache Airflow: Sensitive configuration values are not masked in the logs by default 7.5 High
- aimeos ai-client-html Aimeos HTML client may potentially reveal sensitive information in error log 8.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 more Session disclosure inside the log files 4.7 Medium
- honeywell c300 C300 information leak due to an analysis feature which allows extracting more memory over the... 7.5 High
- dell bsafe ssl-j Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message... 4.4 Medium
- advantech webaccess Advantech WebAccess Debug Messages Revealing Unnecessary Information 6.5 Medium
- vaadin, flow flow-server +1 more Vaadin vulnerable to possible information disclosure of class and method names in RPC response 3.5 Low
- qnap qts, quts hero, qutscloud +8 more +10 more QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) 2.7 Low
- dell bsafe ssl-j Dell BSAFE SSL-J when used in debug mode can reveal unnecessary information. An attacker could... 4.4 Medium
- google android, samsung mobile devices +1 more An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows... 4.1 Medium
- flow flow-server, vaadin flow, vaadin +2 more Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19 5.3 Medium