CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information...4.4 Medium
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote...7.5 High
- unisys stealthTODO DODO7.5 High
- apache nifiApache NiFi Insertion of Sensitive Information into Log File5.3 Medium
- simplesamlphpLog injection in SimpleSAMLphp4.4 Medium
- red hat jboss eap, redhat jboss enterprise application platform, single sign-on +2 moreA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Medium
- gallagher command centreAn issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00...5.5 Medium
- osisoft pi visionOSIsoft PI Vision, PI Vision 2017 R2, PI Vision 2017 R2 SP1, PI Vision 2019. The affected product...4.7 Medium
- pivotal ops manager, pivotal software operations manager +1 morePivotal Ops Manager logs query parameters in tomcat access file8.8 High
- redhat openshift container platform, red hat library-go +1 moreOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the...5.3 Medium
- zte zxcloud goldendata vapAll versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading...5.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11...4.9 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to...6.5 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's...6.5 Medium
- cfme (cloudforms management engine) (cloudforms management engine), redhat cloudforms management engine +1 moreCFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during...5.5 Medium
- puppet continuous deliveryWhen using the cd4pe::root_configuration task to configure a Continuous Delivery for PE...6.5 Medium
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreUAA logs all query parameters with debug logging level8.8 High
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 Medium
- freeipa, red hat ipa, fedoraproject fedora +2 moreFreeIPA logs passwords embedded in commands in calls using batch5.7 Medium
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreCloud Foundry UAA logs query parameters in tomcat access file8.8 High
- red hat openshift, redhat openshift container platform +1 moreSensitive Data Exposure in Openshift Container Platform5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote...6.5 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle backs up private files7.5 High
- mcafee advanced threat defense (atd), advanced threat defense +1 moreAdvanced Threat Defense (ATD) - Information Disclosure vulnerability5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreThe authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account...5.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.0, logs plain text database connection password while...5.5 Medium
- monkeyThe web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.7.5 High
- apache impalaIn Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala...7.5 High
- terra-master fs-210 firmwareAn issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can...7.5 High
- cloud foundry smb volume, pivotal software cloud foundry smb volume, cloud foundry cf deployment +1 more +3 morePassword leak in smbdriver logs8.8 High
- renovatebot renovateRenovate before 19.38.7 Credential Exposure via Go Modules8.7 High
- rapidgatorIn the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log...9.8 Critical
- seesaw parent and familyIn the Seesaw Parent and Family application 6.2.5 for Android, the username and password are...9.8 Critical
- powerschool mobileIn the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in...9.8 Critical
- orbitzIn the Orbitz application 19.31.1 for Android, the username and password are stored in the log...9.8 Critical
- darkhorse dark horse comicsIn the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the...9.8 Critical
- doordashIn the DoorDash application through 11.5.2 for Android, the username and password are stored in...9.8 Critical
- red hat ansible, redhat ansible engine, ansible tower +2 moreAnsible leaks sensitive information to logs when told not to7.3 High
- ibm filenet content managerIBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service...4.1 Medium
- sap landscape management, sap se landscape management enterprise edition +1 moreUnder certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows...4.9 Medium
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose Credentials7.3 High
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +4 more +6 morePotential to access user credentials from the log files when debug logging enabled4.8 Medium
- enterprisedt completeftp serverEnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in...4.3 Medium
- google androidIn the proc filesystem, there is a possible information disclosure due to log information...3.3 Low
- f5 big-ip apm edge client, big-ip access policy manager, big-ip access policy manager client +2 moreBIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in...7.5 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...7.7 High
- dell rsa identity governance and lifecycle, rsa via lifecycle and governance +1 moreThe RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products...8.8 High
- Show moreLoading…