CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects dormitory management systemcode-projects Dormitory Management System modifyuser.php information disclosure3.5 Low
- mrousavy react-native-mmkvInsertion of Sensitive Information into Log File in react-native-mmkv4.4 Medium
- studiowombat wp optin wheel – gamified optin email marketing tool for wordpress and woocommerce, wp optin wheel +1 moreWordPress WP Optin Wheel Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure5.3 Medium
- wpmu dev defender security – malware scanner, login security & firewall, wpmudev defender security +1 moreWordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- jordy meow database cleaner: clean, optimize & repair, database cleaner +1 moreWordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure5.3 Medium
- naa986 wp stripe checkoutWordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure7.5 High
- aaron j 404 solutionWordPress 404 Solution Plugin <= 2.33.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- labring laflaf logs leak9.7 Critical
- cubefsCubeFS leaks users key in logs4.8 Medium
- payhere payment gateway, unknown payhere payment gateway +1 morePayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure7.5 High
- github enterprise serverSensitive Information in Log File in GitHub Enterprise Server7.2 High
- github enterprise serverSensitive Information in Log File in GitHub Enterprise Server8.1 High
- owasp dependency-checkDependencyCheck Debug Mode Logging of NVD API Key5.3 Medium
- octopus serverIn affected versions of Octopus Server it is possible for the OpenID client secret to be logged...4.2 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log File8.0 High
- elastic kibanaKibana Insertion of Sensitive Information into Log File8.0 High
- elastic agentElastic Agent Insertion of Sensitive Information into Log File6.8 Medium
- elastic beatsBeats Insertion of Sensitive Information into Log File6.8 Medium
- elastic enterprise searchEnterprise Search Insertion of Sensitive Information into Log File6.8 Medium
- prolion cryptospikeInsertion of sensitive information in the centralized (Grafana) logging system in ProLion...9.1 Critical
- google nodejs-firestore, cloud firestore +1 moreInformation leak in nodejs-firestore4.0 Medium
- checkmk gmbh appliance, tribe29 checkmk appliance firmware +1 moreBackup password in GET parameter3.3 Low
- artica pandora fms, pandora fms fms +1 moreUnauthenticated Admin Account Takeover Via Cron Log File Backups7.0 High
- codeigniter shieldInsertion of Sensitive Information into Log in codeigniter4/shield5.0 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator information disclosure6.2 Medium
- elastic apm .net agentElastic APM .NET Agent information disclosure2.1 Low
- elastic logstashLogstash Insertion of Sensitive Information into Log File8.4 High
- intel on demandInsertion of sensitive information into log file in some Intel(R) On Demand software before...5.5 Medium
- intel unison softwareInsertion of sensitive information into log file for some Intel Unison software may allow an...2.5 Low
- fortinet fortisiemAn insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version...2.1 Low
- juanfont headscaleHeadscale writes bearer tokens to info-level logs7.5 High
- mongodb atlas kubernetes operatorSecret logging may occur in debug mode of Atlas Operator4.5 Medium
- authzed spicedb`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed4.2 Medium
- google androidIn User Backup Manager, there is a possible way to leak a token to bypass user confirmation for...4.4 Medium
- apache airflow, airflow celery provider +1 moreApache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend7.5 High
- elastic elasticsearchElasticsearch Insertion of sensitive information in audit logs4.1 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log File9.0 Critical
- elastic fleet serverFleet Server Insertion of Sensitive Information into Log File8.1 High
- elastic endpointElastic Endpoint Insertion of Sensitive Information into Log File4.6 Medium
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...4.4 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apache software foundation santuario, apache santuario xml security for java +1 moreApache Santuario: Private Key disclosure in debug-log output6.5 Medium
- ydb ydb-go-sdkToken in custom credentials object can leak through logs in ydb-go-sdk5.5 Medium
- torchbox wagtailDisclosure of user names via admin bulk action views in wagtail2.7 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop logs all keystrokes during initial run after fresh installation4.7 Medium
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.4 Medium
- plixer scrutinizerAn issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to...3.7 Low
- fortinet fortiguestAn insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0...5.5 Medium
- Show moreLoading…