CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- philips dreammapperPhilips DreamMapper Insertion of Sensitive Information into Log File5.3 Medium
- cisco email security appliance (esa), content security management appliance, email security appliance +2 moreCisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability5.5 Medium
- eaton secure connect mobile app, secureconnect +1 moreSensitive date stored in logcat file3.8 Low
- sap adaptive server enterpriseUnder certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to...7.0 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.5.3 Medium
- vmware operations manager, tanzu application service for vms, vmware tanzu application service for vms +2 more +4 moreApp Autoscaler logs credentials5.7 Medium
- ibm mq applianceIBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve...4.1 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an...3.1 Low
- tableau serverA sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x...7.5 High
- cli, npmjs npm, fedoraproject fedora +1 more +3 moreSensitive information exposure through logs in npm cli4.4 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The...5.3 Medium
- f5 big-ip access policy managerIn versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux...5.5 Medium
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can...2.7 Low
- linuxfoundation jaeger, the jager project jaegertracing/jaeger +1 moreInformation Exposure in jaeger7.1 High
- octopus deployIn Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could...6.5 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for...7.5 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain...5.3 Medium
- openshift openshift/openshift-apiserver, redhat openshift container platform +1 moreA flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens...7.5 High
- geovision door access control device, gv-gf192x firmware +1 moreGeoVision Door Access Control Device - Information disclosure vulnerability4.0 Medium
- philips intellibridge enterprise (ibe), intellibridge enterprise +1 morePhilips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File2.0 Low
- hashicorp vaultInformation Disclosure in HashiCorp Vault7.5 High
- pam tacplus project tacplus, arista cloudvision portal, canonical ubuntu linux +1 more +3 moreIn support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can...7.5 High
- octobercms debugbar, rainlab debugbar-plugin +1 morePotential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar6.1 Medium
- cisco digital network architecture center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Information Disclosure Vulnerability4.3 Medium
- synk brokerInformation Exposure in Snyk Broker7.5 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs6.8 Medium
- canonical subiquitySubiquity server installer logged LUKS full disk encryption password2.3 Low
- keycloakKeycloak leaks sensitive information in logged exceptions5.0 Medium
- ibm maximo anywhereIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user...4.3 Medium
- redhat openshift container platform, red hat openshift/cluster-image-registry-operator +1 moreInformation Disclosure in OpenShift Container Platform7.0 High
- evenroute iqrouter firmwareIn the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of...7.5 High
- sap se netweaver as java (http service), sap netweaver application server java +1 moreSAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows...4.5 Medium
- juniper junos os evolvedJunos OS Evolved: objmon logs may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: ev.ops file may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: EvoSharedObjStore may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Configd leaks hashes via stream and is world readable5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Configd leaks hashes via log file and is world readable5.5 Medium
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: VPN cookie local information disclosure3.9 Low
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....7.5 High
- gradle plugin publishingExposure of Sensitive Information in Gradle publish plugin6.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets)...3.3 Low
- mediawiki abusefilterAn issue was discovered in the AbuseFilter extension for MediaWiki. includes/special...7.5 High
- easybuild project easybuild, easybuilders easybuild-framework +1 moreGitHub personal access token leaking into temporary EasyBuild (debug) logs7.7 High
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Medium
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability...6.7 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS...7.9 High
- fortinet fortiwebAn information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an...6.5 Medium
- hcltech connections, hcl software "hcl connections" +1 moreHCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose...5.5 Medium
- cloud foundry capi, cloudfoundry capi-release, cf-deployment +2 moreCloud Controller logs environment variables from app manifests8.0 High
- Show moreLoading…