CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- jupyter server, jupyter-server jupyter server +1 moreSensitive Auth & Cookie data stored in Jupyter server logs7.5 High
- debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 morepython-oslo-utils has improper password parsing4.9 Medium
- tecnoteca cmdbuildIn CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which...6.5 Medium
- sophos utm, unified threat management +1 moreConfd log files contain local users', including root’s, SHA512crypt password hashes with...3.3 Low
- jenkins parameterized trigger, jenkins project parameterized trigger plugin +1 moreSensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin5.5 Medium
- samsung mobile galaxy watch3 plugin, samsung galaxy watch 3 plugin +1 moreInformation Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751...1.9 Low
- samsung watch active2 pluginInformation Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751...1.9 Low
- samsung watch active pluginInformation Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows...1.9 Low
- samsung galaxy watch pluginInformation Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows...1.9 Low
- samsung mobile galaxy s3 plugin, samsung galaxy watch 3 plugin +1 moreInformation Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows...1.9 Low
- samsung galaxy watch pluginInformation Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741...1.9 Low
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44),...6.5 Medium
- keepass, fedoraproject extra packages for enterprise linux, fedora +2 moreA flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in...7.5 High
- correosexpress project correosexpress, unknown correosexpress – shipping management – tags +1 moreCorreosExpress <= 2.6.0 - Sensitive Information Disclosure5.3 Medium
- google androidIn __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log...4.4 Medium
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File.7.5 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon3.3 Low
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability4.4 Medium
- vmware cloud foundationVMware Cloud Foundation contains an information disclosure vulnerability due to logging of...4.9 Medium
- dell emc unity operating environment, vnx control station +1 moreDell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure...7.8 High
- delgan delgan/loguru, loguru project loguru +1 moreInsertion of Sensitive Information into Log File in delgan/loguru4.3 Medium
- m-files serverIn M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.2.0 Low
- stormshield network securityIn Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and...5.5 Medium
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...5.5 Medium
- ibm sterling gentran:server for microsoft windows, sterling gentran +1 moreIBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in...4.0 Medium
- docker desktopDocker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token...5.5 Medium
- siemens cp-8000 master module with i/o -25/+70°c, cp-8000 master module with i/o -40/+70°c, cp-8021 master module +5 more +7 moreA vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions <...7.5 High
- apache geodeApache Geode project log file redaction of sensitive information vulnerability7.5 High
- dell avamar, emc avamar server +1 moreDell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage...6.7 Medium
- mattermostMattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when...5.8 Medium
- synel eharmonynew, eharmonynew, synel reports, reports +2 moreSYNEL - eharmonynew / Synel Reports version 8.0.2 Default credentials , Security miscommunication , Sensetive data exposure6.1 Medium
- google androidIn handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN...5.5 Medium
- google androidIn OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a...2.4 Low
- acronis agentSensitive information could be logged7.5 High
- wipro holmesWipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This...7.8 High
- huawei fusioncompute, ecns280 td firmware +1 moreThere is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and...5.5 Medium
- dell secure connect gateway (scg) 5.0 application, secure connect gateway +1 moreDell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A...7.8 High
- greenplumIn versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with a…6.5 Medium
- puppet, puppet enterprise, connect +2 moreA flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters...4.4 Medium
- intel ssd d-s4510 firmware, ssd d5-p4320 firmware, ssd d5-p4326 firmware +15 more +17 moreInsertion of information into log file in firmware for some Intel(R) SSD DC may allow a...4.4 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble...6.5 Medium
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...5.5 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The...5.5 Medium
- gitlabAccidental logging of system root password in the migration log in all versions of GitLab CE/EE...4.4 Medium
- draytek vigorconnectAn information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an...7.5 High
- gitlabInformation disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL...2.0 Low
- torproject tor browserTor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can...6.1 Medium
- f5 big-ip access policy manager, big-ip guided configuration +1 moreOn all versions of Guided Configuration before 8.0.0, when a configuration that contains secure...4.9 Medium
- check-spellingcheck-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack9.9 Critical
- Show moreLoading…