CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- nextcloud server, kiteworks security-advisories +1 moreExceptions may have logged Encryption-at-Rest key content in Nextcloud server5.5 Medium
- perforce puppet enterprise, puppet, puppet enterprise +2 moreA flaw was discovered in bolt-server and ace where running a task with sensitive parameters...4.9 Medium
- open-emr openemrOpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via...6.5 Medium
- braveAn information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged...6.1 Medium
- puppet puppetdb, enterprise +1 morePuppetDB logging included potentially sensitive system information.4.3 Medium
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read...7.5 High
- netmodule router softwareCertain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with...8.8 High
- runzero platform, shopware +1 moreInsecure direct object reference of log files of the Import/Export feature6.5 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.2.x and 9.1.0.x contain an insertion of sensitive...8.1 High
- dell data protection search, emc data protection search, emc integrated data protection appliance +2 moreDell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an...8.8 High
- dell wyse thinosDell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure...3.9 Low
- dell wyse thinosDell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An...7.2 High
- netapp cloud managerNetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory...4.3 Medium
- netapp cloud managerNetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to...4.3 Medium
- graylogA Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate...9.8 Critical
- graylogA Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate...9.8 Critical
- dell emc networker, networker +1 moreDell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information...7.8 High
- apache impalaImpala logs contain secrets7.5 High
- motorola cx2 firmwareAn issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin...7.5 High
- mv idceInformation disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and...7.5 High
- typo3, typo3 typo3.cms +1 moreInformation Disclosure in User Authentication5.3 Medium
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated...5.5 Medium
- cisco business process automation, business process automation (bpa) +1 moreCisco Business Process Automation Privilege Escalation Vulnerabilities8.8 High
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged...4.4 Medium
- eram myfax150 firmware, myfax250 firmware, myfax450 firmware +2 moremyFax version 229 logs sensitive information in the export log module which allows any user to...6.5 Medium
- zammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive...7.5 High
- samsung watch active2 pluginImproper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version...5.5 Medium
- samsung watch active pluginImproper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151...5.5 Medium
- samsung mobile galaxy watch3 plugin, samsung galaxy watch 3 plugin +1 moreImproper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151...5.5 Medium
- samsung galaxy watch pluginImproper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151...5.5 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: User role authorization secret for Console leaked through log file export3.8 Low
- broadcom sannavBrocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.7.5 High
- gitlabGitLab CE/EE since version 9.5 allows a high privilege user to obtain sensitive information from...4.4 Medium
- dell emc networker, networker +1 moreDell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information...8.2 High
- microfocus secure api managerInsertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager ...7.5 High
- redhat jboss a-mqA flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when...4.4 Medium
- google androidIn sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC...4.4 Medium
github.com/argoproj/argo-cdGoHelm OCI credentials leaked into Argo CD logs6.6 Medium- bmc remedy mid-tierBMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by...5.3 Medium
- redhat noobaa-operatorA flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens...8.8 High
- hashicorp vault-actionVault GitHub Action did not correctly mask multi-line secrets in output7.5 High
- ibm spectrum protect plusIBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive...6.2 Medium
- automox, automox agent +1 moreAutomox Agent Sensitive Log Information Disclosure3.3 Low
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...4.3 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logs2.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly4.4 Medium
- fortinet fortiadc, fortiadc manager, fortiadcmanager, fortiadc +2 moreA clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3...4.3 Medium
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive...7.5 High
- red hat ansible, redhat ansible tower, fedoraproject fedora +2 moreA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Medium
- gitlabAn information disclosure issue in GitLab starting from version 12.8 allowed a user with access...6.2 Medium
- Show moreLoading…