CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file...7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information...6.1 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6,...5.5 Medium
- google androidThe logs of sensitive information (PII) or hardware identifier should only be printed in Android ...5.5 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security information disclosure4.2 Medium
- runzero platform, shopware +1 moreImproper Output Neutralization in Log Module in shopware2.7 Low
- linuxfoundation spinnakerSpinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds4.3 Medium
- m-files serverInsertion of Sensitive Information into Log File4.4 Medium
- ibm cognos analyticsIBM Cognos Analytics information disclosure5.3 Medium
- micro focus groupwise web, microfocus groupwise +1 moreCVE-2022-38756 vulnerability in GW Web prior to 18.4.24.3 Medium
- arc informatique pcvueAn insertion of sensitive information into log file vulnerability exists in PcVue versions 15...4.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs5.5 Medium
- traefikAuthorization header displayed in the debug logs3.5 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows...4.4 Medium
- octopus serverIn affected versions of Octopus Server it is possible for target discovery to print certain...7.5 High
- fluenx deepl pro api translation, unknown deepl pro api translation plugin +1 moreDeepL Pro API Translation < 1.7.5 - API Key Disclosure7.5 High
- davidlingren media library assistant, david lingren media library assistant (wordpress plugin) +1 moreWordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability3.7 Low
- wireWire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages...4.7 Medium
- palantir foundry build2A component in Foundry logging was found to be capturing sensitive information in logs.4.2 Medium
- palantir foundry code-workbooksThe Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.4.2 Medium
- ibm mq internet pass-thruIBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in...5.1 Medium
- samsung galaxy buds pro manage, samsung mobile galaxy buds pro manager +1 moreSensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to...3.3 Low
- acronis cyber protect home officeSensitive information leak through log files. The following products are affected: Acronis Cyber...4.0 Medium
- osisoft-pi-web-connector project osisoft-pi-web-connector, palantir foundry magritte plugin osisoft-pi-web-connector +1 moreThe Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.4.2 Medium
- netskope, netskope nsclient +1 moreSensitive Information store in NSClient logs8.4 High
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build...6.5 Medium
- fortinet forticlient, forticlientmac +1 moreAn exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in...2.2 Low
- hitachi infrastructure analytics advisor, ops center analyzer +1 moreInformation Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer6.5 Medium
- hitachi ops center analyzerInformation Exposure Vulnerability in Hitachi Ops Center Analyzer6.6 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreAn authenticated attacker could utilize the identical agent and cluster node linking keys to...6.5 Medium
- gitlabAn information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3...6.8 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6,...6.7 Medium
- broadcom reactor nettyInvalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens4.3 Medium
- gitlabEmail addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to...3.5 Low
- samsung reminderInsertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01...5.9 Medium
- samsung accountSensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows...4.0 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing...5.3 Medium
- rocket.chatA cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged...4.4 Medium
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File...7.5 High
- samsung membersExposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions...2.8 Low
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0...8.1 High
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 moreA local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s...5.5 Medium
- gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 moreAn issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a...7.5 High
- ericsson network managerIn Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS...4.9 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive...6.5 Medium
- qualys cloud agent** DISPUTED ** An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe"...5.5 Medium
- hashicorp consul templateHashiCorp Consul Template could reveal Vault secret contents in error messages7.5 High
- google androidIn Accounts, there is a possible way to write sensitive information to the system log due to...5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in...3.2 Low
- Show moreLoading…