CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet fortios, fortiproxy +1 moreAn insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...3.3 Low
- hoppscotchDatabase password exposed in logs in hoppscotch7.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies...4.3 Medium
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any...3.3 Low
- kubernetes secrets-store-csi-driverKubernetes secrets-store-csi-driver discloses service account tokens in logs6.5 Medium
- abb platform engineering tools, qcs 800xa, qcs ac450 +2 more +4 moreQCS 800xA Vulnerability identified in system log files7.8 High
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin has improper masking of credentials7.5 High
- mattermostDB username/password revealed in application logs6.7 Medium
- intel open cache acceleration softwareInsertion of sensitive information into log file in the Open CAS software for Linux maintained by...2.0 Low
- elastic filebeatFilebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http...3.3 Low
- samsung android, mobile devices, samsung mobile devices +2 moreKernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged...4.4 Medium
@mittwald/kubernetesnpm@mittwald/kubernetes's secret contents leaked via debug logging4.4 Medium- checkmkAutomation user secret logged to Apache access log4.4 Medium
- lightbend alpakka kafkaLightbend Alpakka Kafka logs credentials on debug level5.5 Medium
- canonical cloud-init, ubuntu linux, fedoraproject fedora +2 moresensitive data exposure in cloud-init logs5.5 Medium
- cloverdxCloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log...9.1 Critical
- kitchen-terraform project kitchen-terraformSensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform3.2 Low
- amazon aws-sigv4, awslabs aws-sdk-rust +1 moreAWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending5.5 Medium
- ciliumDebug mode leaks confidential data in Cilium7.2 High
- terminalfourThe Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain...4.9 Medium
- jetbrains phpstormIn JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file3.3 Low
- gbgplc acuant asureid sentinelAn issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C:...5.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File3.8 Low
- f5 nginx agent, nginx instance manager +1 moreNGINX Agent vulnerability CVE-2023-15505.5 Medium
- veracodeVeracode Scan Jenkins Plugin vulnerable to information disclosure6.5 Medium
- gocdSensitive information disclosure possible on misconfigured failed backups of non-H2 databases in gocd4.2 Medium
- juiker, juiker app +1 moreJuiker app - Information Leakage2.4 Low
- redhat openshift assisted installer, openshift container platform +1 moreOpenShift Assisted Installer leaks image pull secrets as plaintext in installation logs5.5 Medium
- invernyx smartcars 3, smartcars-3-bugs +1 moresmartCARS 3 Password Stored as plain text in Error Log8.0 High
- directusdirectus vulnerable to Insertion of Sensitive Information into Log File4.2 Medium
- vmware spring vault, spring cloud config, spring cloud vault +2 moreSpring Vault vulnerable to insertion of sensitive information into a log file5.5 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure4.3 Medium
- freshrssSensitive information exposure in the logs of greader API in FreshRSS4.0 Medium
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- ibm maximo application suiteIBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could...6.2 Medium
- opennms horizon, meridian +1 morePlaintext Password Present in the Web logs6.8 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize information disclosure6.5 Medium
- checkmkHost secret disclosed in Checkmk logs6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows information disclosure6.2 Medium
- fortinet fortiportalAn insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal...4.1 Medium
- akindo sushiro co., ltd. sushiro app for android, akindo-sushiro hong kong sushiro, singapore sushiro +3 more +5 moreSUSHIRO App for Android outputs sensitive information to the log file, which may result in an...7.5 High
- samsung android, samsung mobile devices +1 moreExposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1...4.4 Medium
- argoproj argo cd, argo-cd +1 moreArgo CD leaks repository credentials in user-facing error messages and in logs6.3 Medium
- tinacms, ssw tinacms\/cli +1 moreSensitive Information leak via Script File in TinaCMS8.6 High
- anchore syftCredential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft6.5 Medium
- ibm app connect enterprise, app connect enterprise certified container +1 moreIBM App Connect Enterprise information disclosure6.8 Medium
- tpcms project tpcmsIncorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log...8.7 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file...7.9 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log...8.1 High
- Show moreLoading…