CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- openstack ceilometer, [unknown] openstack-ceilometer, redhat openstack +2 moreCeilometer Prints Sensitive Configuration Data to Log4.0 Medium
- [unknown] openstack-octavia, openstack octavia, redhat openstack +2 moreOpenstack Octavia allows Insertion of Sensitive Information into Log File5.5 Medium
- elastic logstash, netapp active iq performance analytics services +1 moreA sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1...9.8 Critical
- envoy passport for android, passport for iphone, passport +2 moreEnvoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain...2.9 Low
- securenvoy securaccess** DISPUTED ** An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode...7.0 High
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-file4.0 Medium
- ens webgalambIn Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs...7.5 High
- dell rsa archer, rsa archer grc platform +1 moreInformation Exposure Vulnerability7.8 High
- dell rsa archer, rsa archer grc platform +1 moreInformation Exposure Vulnerability7.8 High
- microsoft java sdk for azure iot, java software development kit +1 moreAn information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive...7.5 High
- octopus deploy, server +1 moreAn Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 ...6.5 Medium
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...7.5 High
- ibm api connectAPI Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in...9.0 Critical
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL...3.7 Low
- draeger delta xl firmware, infinity delta firmware, infinity explorer c700 firmware +2 more +4 moreDrager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version,...6.5 Medium
- cephCeph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the...5.5 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Splunk credentials are in logged in clear text8.8 High
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text7.1 High
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: API and device keys are logged in a world-readable permissions file7.8 High
- aria2 project aria2, canonical ubuntu linux, debian linux +1 more +3 morearia2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and...7.8 High
- coolpad canvas firmwareThe Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M...5.9 Medium
- vivo v7 firmwareThe Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user...4.7 Medium
- vivo v7 firmwareThe Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857...5.5 Medium
- zteusa zte blade spark firmware, zte blade vantage firmware, zte zmax champ firmware +1 more +3 moreThe ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V...4.7 Medium
- agilebits 1passwordAn issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error...5.5 Medium
- cloud foundry nfs volume release, pivotal software cloud foundry nfs volume +1 moreNFS Volume release errand leaks cf admin credentials in logs8.4 High
- qt, opensuse leap +1 moreA keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x,...7.5 High
- hashicorp vaultHashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or...8.1 High
- drobo 5n2 firmwareIncorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13...7.5 High
- red hat ansible, redhat ansible engine +1 moreAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Medium
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities5.9 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the...6.2 Medium
- unknown circontrol circarlife all versions prior to 4.3.1, circontrol circarlife firmware +1 moreCircontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored...9.8 Critical
- ibm spectrum protect, spectrum protect server +1 moreIBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace...4.1 Medium
- citrix netscaler sd-wan, sd-wan +1 moreAn Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and...7.5 High
- pivotal container servicePKS leaks IaaS Credentials to Application Logs9.0 Critical
- pivotal software cloud foundry log cache, cloud foundry log-cache-release +1 moreLog Cache logs UAA client secret on startup9.1 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before...9.8 Critical
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an...5.6 Medium
- mediawiki, debian linux +1 moreInformation disclosure in Special:Redirect/logid6.5 Medium
- elastic cloud enterpriseElastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure...7.5 High
- elastic elasticsearch, azure repository +1 moreA sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly...8.1 High
- cloud foundry container runtime, pivotal cloud foundry container runtime +1 moreCloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and...8.8 High
- pivotal cloud cachePivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during...8.8 High
- orbic wonder rc555l firmwareAn issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release...5.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker...5.3 Medium
- linux kernelThe aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16...5.5 Medium
- jenkins ssh agentJenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log6.5 Medium
- openstack heat, redhat openstack, red hat openstack-heat +2 moreAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1...5.9 Medium
- ovirt, red hat ovirt-engine, redhat virtualization +2 moreovirt-engine Logs Plaintext Passwords To File7.2 High
- Show moreLoading…