CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- samsung accountInformation Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically...2.0 Low
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability7.0 High
- huawei nip6300 firmware, nip6600 firmware, secospace usg6300 firmware +3 more +5 moreThere is an information leakage vulnerability in some huawei products. Due to the properly...4.4 Medium
- canonical cloud-initsensitive data exposure in cloud-init logs5.5 Medium
- cloudera data engineeringIn Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators...6.5 Medium
- red hat ansible, oracle virtualization, redhat ansible tower +5 more +7 moreInsertion of Sensitive Information into Log File in ansible5.5 Medium
- red hat ansibleInsertion of Sensitive Information into Log File in ansible5.5 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 moreInsertion of Sensitive Information into Log File in ansible5.5 Medium
- palo alto networks cortex xsoarCortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs5.1 Medium
- vagrant project vagrant, jlleitschuh security-research +1 moreSensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin5.3 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Cleartext Storage of Sensitive Information via cmdmod4.4 Medium
- teradici pcoip graphics agent, pcoip standard agent +1 moreUnder certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici...5.5 Medium
- elastic apm agent, apm agent for go +1 moreInformation Disclosure in go.elastic.co/apm2.4 Low
- elastic elasticsearchInsertion of Sensitive Information into Log File in Elasticsearch4.9 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer...6.5 Medium
- zte zxv10 b860a, zxv10 b860a firmware +1 moreA ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify...4.4 Medium
- cisco emergency responder, prime license manager, unified communications manager +2 more +4 moreCisco Unified Communications Products Information Disclosure Vulnerability4.3 Medium
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logs4.4 Medium
- dell unity, emc unity operating environment, emc unity vsa operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text...6.4 Medium
- google androidIn onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to...4.4 Medium
- wp-ecommerce easy wp smtpThe easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as...7.5 High
- gitlab, gitlab ee +1 moreInformation disclosure in Advanced Search component of GitLab EE starting from 8.4 results in...4.0 Medium
- kubernetesSecret leaks in logs for vSphere Provider kube-controller-manager4.7 Medium
- kubernetesDocker config secrets leaked when file is malformed and loglevel >= 44.7 Medium
- kubernetesIncomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 94.7 Medium
- kubernetesCeph RBD adminSecrets exposed in logs when loglevel >= 44.7 Medium
- sap adaptive server enterpriseIn certain situations, an attacker with regular user credentials and local access to an ASE...2.6 Low
- ibm business automation workflowIBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files...5.1 Medium
- red hat wildflyWildfly logs plaintext passwords5.3 Medium
- redhat gluster-blockAn information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the...5.5 Medium
- heketi project heketi, redhat enterprise linux, gluster storage +1 more +3 moreHeketi logs sensitive information5.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5...6.5 Medium
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system state3.3 Low
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Log Information Disclosure Vulnerability4.3 Medium
- b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 moreGateManager Information Disclosure Vulnerability6.5 Medium
- dell emc openmanage integration for microsoft system center, omimssc (openmanage integration for microsoft system center) +1 moreDell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...9.0 Critical
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets)...7.5 High
- monocmsMonoCMS Blog version as of 29-09-2020 stores hard-coded admin hashes in the log.xml file in the...7.5 High
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi Stateless7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote...6.5 Medium
- cpanelcPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC...7.5 High
- renovatebot renovateRenovate 19.180.0 before 23.25.1 Token Leakage via Logs8.7 High
- red hat ansible, redhat ansible engine, debian linux +2 moreInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Medium
- red hat ansible, debian linux, redhat ansible engine +2 moreImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Medium
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) history3.3 Low
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs3.3 Low
- octopus deployIn Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user...7.5 High
- mcafee endpoint security, bitdefender endpoint security for windows +1 moreExposure of Sensitive Information in ENS for Windows4.7 Medium
- cisco webex meetings, webex teams +1 moreCisco Webex Meetings Client for Windows, Webex Meetings Desktop App, and Webex Teams Information Disclosure Vulnerability4.4 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The...5.5 Medium
- Show moreLoading…