CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- vmware vrealize operationsVMware vRealize Operations contains an information disclosure vulnerability. A low-privileged...4.3 Medium
- arista cloudvision portalThis advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked i…4.0 Medium
- nextcloud mail, kiteworks security-advisories +1 morePassword disclosure in log file in Nextcloud Mail App3.1 Low
- next-auth nextauth.js, nextauthjs next-auth +1 moreLeakage of excessive information into log in next-auth3.3 Low
- wavlink wl-wn579x3 firmwareWAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in...4.1 Medium
- perforce puppet bolt, puppet bolt +1 moreSensitive Parameter Exposure in Puppet Bolt prior to 3.244.1 Medium
- zte zxmp m721, zxmp m721 firmware +1 moreZXMP M721 has an information leak vulnerability. Since the serial port authentication on the...7.5 High
- couchbase serverIn Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the...5.9 Medium
- google android, samsung mobile devices +1 moreSensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul...3.3 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local...2.0 Low
- google android, samsung mobile devices +1 moreSensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR...3.3 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows...3.3 Low
- couchbase serverAn issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in...5.3 Medium
- cisco roomos software, telepresence collaboration endpoint +1 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability4.9 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could disclose sensitive database information to a local user in plain text.4.0 Medium
- openvpn access serverThe OpenVPN Access Server installer creates a log file readable for everyone, which from version...7.5 High
- canonical cloud-init, ubuntu linux +1 moresensitive data exposure in cloud-init logs5.5 Medium
- weave gitops, weaveworks weave-gitops +1 moreWeave GitOps leaked cluster credentials into logs on connection errors9.0 Critical
- cisco adaptive security device manager, adaptive security device manager (asdm) +1 moreCisco Adaptive Security Device Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +11 more +13 moreWindows Desired State Configuration (DSC) Information Disclosure Vulnerability5.5 Medium
- typo3Insertion of Sensitive Information into Log File in typo3/cms-core5.3 Medium
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A...4.3 Medium
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted...7.5 High
- couchbase serverCouchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized...6.5 Medium
- samsung find my mobileSensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2...3.3 Low
- samsung find my mobileSensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7...3.3 Low
- samsung accountSensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6...4.0 Medium
- riverbed appresponseRiverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11...6.8 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities4.3 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities4.3 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible4.4 Medium
- sap host agentUnder certain conditions, the SAP Host Agent logfile shows information which would otherwise be...5.5 Medium
- brocade sannavAn information exposure through log file vulnerability in Brocade SANNav versions before Brocade...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when...6.5 Medium
- f5 big-ip apm, big-ip apm clients, big-ip access policy manager +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...5.5 Medium
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that...3.7 Low
- hashicorp go-getterInsertion of Sensitive Information into Log File in Hashicorp go-getter5.5 Medium
- palantir foundry issuesThe Foundry Issues service was found to be logging in a manner that captured session tokens.5.5 Medium
- cve cve-servicesPotential Secrets being logged to disk in CVEProject/cve-services5.3 Medium
- microsoft azure sdk for .netAzure SDK for .NET Information Disclosure Vulnerability5.3 Medium
- gitlabMissing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to...2.6 Low
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can...8.1 High
- tpcms project tpcmsTPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information...7.5 High
- jupyter notebookInsertion of Sensitive Information into Log File affects Jupyter Notebook7.5 High
- google androidIn ArrayMap, there is a possible leak of the content of SMS messages due to log information...3.3 Low
- asseco dvs avilysThe Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10...7.5 High
- Show moreLoading…