CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- couchbase serverAn issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached ...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11...6.5 Medium
- f5 container ingress service, redhat openshift +1 moreOn version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes...4.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes client-go logs authorization headers at debug verbosity levels4.7 Medium
- gallagher command centreAn issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade,...9.8 Critical
- octopus serverIn Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an...6.5 Medium
- octopus tentacle, server +1 moreIn Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an...6.5 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Logging on Android6.5 Medium
- osisoft pi web apiOSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.6.5 Medium
- swann swwhd-intcam-hd firmwareSwann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset.5.5 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability4.9 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability6.5 Medium
- jenkins mask passwords, jenkins project mask passwords plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Mask Passwords Plugin6.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin5.5 Medium
- ibm cloud privateIBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain...4.4 Medium
- cpanelcPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).2.7 Low
- cpanelIn cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).3.3 Low
- cpanelcPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of...2.5 Low
- cpanelIn cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC...6.5 Medium
- jenkins ec2, jenkins project amazon ec2 plugin +1 moreJenkins Amazon EC2 Plugin leaked beginning of private key in system log5.5 Medium
- jenkins maven, jenkins project maven integration plugin +1 moreMaven Integration Plugin did not mask sensitive values in module build logs6.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 morePlaintext Storage of a Password in Jenkins Configuration as Code Plugin5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin3.3 Low
- red hat openshift, redhat openshift container platform +1 moreOpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit...2.3 Low
- apache stormExposure of Sensitive Information in Apache Storm Logviewer7.5 High
- octopus deployIn Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an...6.5 Medium
- pivotal software container service, pivotal container service (pks) +1 morePKS Telemetry logs credentials2.2 Low
- tronlink walletThe user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when...6.5 Medium
- dockerSecret insertion into debug log in Docker7.5 High
- ovirt, red hat ovirt-engine-metrics, redhat virtualization manager +2 moreSensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were...5.9 Medium
- gitlabGitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...6.5 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain...5.1 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a...4.0 Medium
- cisco data center network managerCisco Data Center Network Manager Information Disclosure Vulnerability5.3 Medium
- ibm pureapplication systemIBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in...4.4 Medium
- cloud foundry boshBosh Deployment logs leak sensitive information6.0 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreCredential exposure through log files in Undertow5.3 Medium
- northern cfengineNorthern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.8.8 High
sequelize-clinpmSensitive Data Exposure in sequelize-cli3.5 Low- sony photo sharing plusSony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used...8.1 High
- lenovo xclarity administratorAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy...8.7 High
- projectsendProjectSend before r1070 writes user passwords to the server logs.7.5 High
- aquaverde aquarius cmsaquaverde Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a...7.5 High
- aquaverde aquarius cmsaquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an...7.5 High
- ubuntu unity-scope-gdrive, canonical ubuntu linux +1 moreunity-scope-gdrive search feature logs search terms to syslog2.0 Low
- ibm system x, bladecenter hs22 firmware, bladecenter hs23 firmware +35 more +37 moreIn various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s...6.5 Medium
- red hat candlepin, redhat satellite +1 moreIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 Medium
- dasannetworks h660rm firmwareThe Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to...8.8 High
- juniper service insight, service now +1 moreJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.6.5 Medium
- ibm cloud privateThe IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a...5.5 Medium
- Show moreLoading…