CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- cognito moneyworksPassword exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain...9.8 Critical
- ibm integrated management module firmware, lenovo group ltd. system x imm2 +1 moreIn the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other...6.5 Medium
- elastic logstash, elasticsearch output plugin +1 moreLogstash Logs Sensitive Information6.5 Medium
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x...9.8 Critical
- apache cordova, apache software foundation cordova android +1 moreInformation Exposure in cordova-android7.5 High
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log...9.8 Critical
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log...9.8 Critical
- openstack oslo.middleware, unspecified python-oslo-middleware, canonical ubuntu linux +2 moreoslo.middleware Information Disclosure vulnerability5.9 Medium
- openstack novaOpenStack Nova logs sensitive context from notification exceptions9.8 Critical
- ibm cognos business intelligenceIBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be...5.5 Medium
- lenovo xclarity administratorLog files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may...9.8 Critical
- osisoft pi coresight, pi web api +1 moreAn issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016...7.8 High
- moxa miineport e1 firmware, miineport e2 firmware, miineport e3 firmware +2 moreAn issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and...7.5 High
- moxa edr-810 firmwareAn issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform...7.5 High
- linux kernelThe klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel...5.5 Medium
- sendquick avera sms gateway firmware, entera sms gateway firmware +1 moreAn issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could...6.2 Medium
- ibm kenexa lms on cloudIBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log...4.3 Medium
- hclsoftware bigfix platformIBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive...3.3 Low
- mybb merge system, mybb +1 moreMyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8...7.5 High
- cloudfoundry capi-release, cf-release +1 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI...7.5 High
- redhat enterprise virtualizationRed Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys...5.5 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by...1.9 Low
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive...4.3 Medium
- ibm rational asset analyzerThe installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local...5.5 Medium
- redhat enterprise virtualizationThe ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0...3.3 Low
- moxa edr-g903 firmwareMoxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log...7.5 High
- moxa edr-g903 firmwareMoxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration...7.5 High
- openstack image registry and delivery service \(glance\)OpenStack Glance sensitive information disclosure via logs2.6 Low
- openstack ceilometer(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the...1.9 Low
- digital alert systems dasdec eas, monroe electronics r189 one-net eas +1 moreThe web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe...7.8 High
- openbsd opensshThe auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug...3.5 Low
- apache tomcatInsertion of Sensitive Information into Log File in Apache Tomcat1.9 Low
- fedoraproject fedora, gnome networkmanager +1 moreThe destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0...2.1 Low
- moinmoinMoinMoin Insertion of Sensitive Information into Log File5.0 Medium
- apache http serverThe log files in Apache web server contain information directly supplied by clients and does not...5.0 Medium