CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- go-vikunja vikunja Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs 8.4 High
- go-vikunja vikunja Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging 6.9 Medium
- icopydoc yml for yandex market YML for Yandex Market <= 5.10.0 - Unauthenticated Sensitive Information Exposure through Log File via 'y4ym_check_action' Parameter via admin-post.php 5.3 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.1 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.8 Medium
- johnson controls c-cure 9000, victor Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000,... 8.8 High
- jetbrains junie cli In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session... 5.5 Medium
- tinyhumansai openhuman OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response) 8.8 High
- apache software foundation juneau Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors 10.0 Critical
- ibm mq IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility 6.2 Medium
- warp-tech warpgate Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller 3.7 Low
- tata motors ira 2.0, ira.ev +1 more Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application 6.8 Medium
- mongodb rust driver Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command 6.8 Medium
- armurox loggingredactor Logging Redactor: PII data in str/repr of non primitive objects was not being redacted 8.2 High
- axxonsoft axxonnet arp agent LDAP Bind Password Exposure in AxxonNet ARP Agent Logs 6.8 Medium
- wso2 api control plane, api manager, carbon event publisher core +6 more +8 more Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data 4.4 Medium
- mediatek, inc. mediatek chipset In Modem, there is a possible information disclosure due to side channel information disclosure.... 4.1 Medium
- element-hq element-call Element Call exposes shared passwords in logs 5.9 Medium
- aws amazon-kinesis-producer Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java 8.2 High
- zuke-build zuke Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run 7.5 High
- cloud foundry cf-deployment, cloud foundry foundation capi (cloud foundry controller) +1 more Cloud Controller exposes secrets in audit log 6.5 Medium
- progress software ws ftp server Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server 6.6 Medium
- n8n-io n8n n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data 5.3 Medium
- mlflow MLflow CrewAI autologging records LLM provider API keys in logged trace spans 6.5 Medium
- tanium reputation Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. 6.6 Medium
- tanium threat response Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. 4.2 Medium
- docker desktop Docker Desktop logs can expose stored third-party credentials 5.7 Medium
- octopus deploy server In affected versions of Octopus Server, creating a user invitation writes the invitation code to... 7.7 High
- openpanel-dev openpanel OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs 7.1 High
- apple ipados, macos, tvos +4 more +6 more A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and... 3.3 Low
- apple macos A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden... 3.3 Low
- apple ipados, macos, tvos +4 more +6 more A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and... 6.2 Medium
- bizerba brain2 Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files 4.4 Medium
- langchain-ai langgraph LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output 4.1 Medium
- elixir-plug plug, plug crypto +1 more Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments 5.1 Medium
- knime analytics platform KNIME Analytics Platform logs credentials of configured proxy when used as an executor 4.8 Medium
- openbao OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters 2.0 Low
- watchguard agent Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File 6.9 Medium
- abdolence slack-morphism-rust Slack Morphism verifier errors disclose valid HMACs in the logs 5.3 Medium
- progressive robot ltd hmailserver Insertion of Sensitive Information into Log File in hMailServer 4.7 Medium
- a2aproject a2a-java A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure 5.7 Medium
- apache camel Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default 5.5 Medium
- apache software foundation answer Apache Answer: API keys logged in plaintext during authentication 8.1 High
- mattermost, mattermost server +1 more Mattermost logs plaintext authentication tokens in debug-level server logs on failed auth attempts 4.5 Medium
- aws sagemaker python sdk Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py 6.0 Medium
- dell terraform provider for ome Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive... 4.3 Medium
- dell terraform provider for redfish Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of... 4.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file 5.5 Medium
- auth0 auth0-lock Improper Request Handling for Active Directory Logins in auth0-lock 5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel-Mode Drivers Information Disclosure Vulnerability 5.5 Medium
- Show olderLoading…