CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- shenzhen reachfar technology company limited reachfar v28, reachfargps reachfar gps firmware +1 moreShenzhen Reachfar v28 information exposure7.5 High
- f5 big-ip, big-iq, big-ip access policy manager +18 more +20 moreBIGIP and BIG-IQ TACACS+ audit log Vulnerability5.5 Medium
- f5 big-ip, big-ip domain name system, big-ip local traffic manager +2 moreBIG-IP DNS TSIG Key vulnerability5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip guided configuration +2 moreBIG-IP APM Guided Configuration vulnerability4.4 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information leak through log files. The following products are affected: Acronis Agent ...4.4 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +2 more +4 morePlatform: token exposed at importing project6.3 Medium
- canonical subiquitySensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in...5.5 Medium
- milesight ur32 firmware, ur32l firmware, ur35 firmware +2 more +4 moreAn information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows...7.5 High
- ayesa ibermatica rps, ibermatica rps 2019 +1 moreCryptographic Issues on IBERMATICA RPS8.2 High
- ayesa ibermatica rps, ibermatica rps 2019 +1 moreInformation exposure on IBERMATICA RPS8.2 High
- hitachi ops center administratorInformation Exposure Vulnerability in Hitachi Ops Center Administrator6.5 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information leak through log files. The following products are affected: Acronis Cyber...4.4 Medium
- huawei emui, harmonyos +1 moreScreenshot vulnerability in the input module. Successful exploitation of this vulnerability may...7.5 High
- china unicom tewa-800g, chinaunicom tewa-800g firmware +1 moreChina Unicom TEWA-800G debug log file2.0 Low
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- qnap qvr pro clientQVR Pro Client6.7 Medium
- argoproj argo cd, argo-cd +1 moreCluster secret might leak in cluster details page in Argo CD9.9 Critical
- apple macos, ipados, iphone os +2 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreImproper masking of credentials in Jenkins Pipeline Maven Integration Plugin5.3 Medium
- samsung android, samsung mobile devices +1 moreInsertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023...4.4 Medium
- acronis agentSensitive information leak through log files. The following products are affected: Acronis Agent ...4.4 Medium
- mongodb c driver, node.js, php driver +4 more +6 moreSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application4.2 Medium
- linuxfoundation spinnakerImproper log output when using GitHub Status Notifications in spinnaker4.0 Medium
- ibm robotic process automationIBM Robotic Process Automation information disclosure4.3 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure4.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin information disclosure vulnerability4.3 Medium
- dell powerscale onefsDell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file...6.3 Medium
- mattermostAudit logging fails to sanitize post metadata4.5 Medium
- cms-dev cmsPlaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain...6.5 Medium
- f5 f5os-a, f5os - appliance +1 moreF5OS-A vulnerability4.4 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.9 Medium
- brocade fabric os, broadcom fabric operating system +1 morescp, sftp, ftp servers passwords in supportsave6.8 Medium
- dell ecs streamerDell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in...5.8 Medium
- vmware isolation segment, tanzu application service for vms, tanzu application service for virtual machines +2 moreVMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability6.5 Medium
- dell powerstore, powerstoreos +1 moreDell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log...9.0 Critical
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure...5.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure...5.5 Medium
- ibm cloud pak for data, planning analytics cartridge for cloud pak for data +1 moreIBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure5.3 Medium
- ibm cloud pak for data, sterling connect:express for unix +1 moreIBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure6.5 Medium
- weave gitops terraform controller, weaveworks tf-controller +1 moreInformation Disclosure Vulnerability in Weave GitOps Terraform Controller8.5 High
- archerirm archerAn issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an...6.0 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab3.9 Low
- cisco duo authentication proxy, duo authentication proxy +1 moreA vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an...4.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be...4.3 Medium
- trendmicro mobile security, trend micro, inc. micro moibile security for enterprise +1 moreA remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- suse neuvector, manager server +1 moreJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Critical
- cloud foundry cf-nfs-volume release, notifications, smb-volume release +3 more +5 moreCF workflows leak credentials in system audit logs6.5 Medium
- Show moreLoading…