CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- tribulant slideshow galleryWordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability5.3 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially...6.2 Medium
- dotcms, dotcms core +1 moreDatabase Credential Exposure in the Logs4.5 Medium
- paid memberships pro – mailchimp add onWordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability5.3 Medium
- frederic gilles fg prestashop to woocommerceWordPress FG PrestaShop to WooCommerce plugin <= 4.45.1 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- paid memberships pro – payfast gateway add on, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive...7.9 High
- seraphinite solutions accelerator, seraphinitesoft seraphinite accelerator +1 moreWordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- peepso community by peepsoWordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- splunk, splunk enterprise +1 moreSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise7.2 High
- gsheetconnector cf7 google sheets connectorWordPress CF7 Google Sheets Connector plugin <= 5.0.5 - Sensitive Data Exposure via Debug Log vulnerability7.5 High
- dell grab, grab for windows +1 moreDell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive...4.8 Medium
- hitachi unified storage vm, virtual storage platform, virtual storage platform 5100, 5500, 5100h, 5500h +9 more +11 moreInformation Exposure Vulnerability in Hitachi Disk Array Systems9.9 Critical
- itopvpn dualsafe password managerAn issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker...7.1 High
- avsystem unified management platformInsecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567...5.5 Medium
- No product listedInsertion of sensitive information into log file for some Intel(R) Local Manageability Service...3.3 Low
- ckanPotential log injection in reset user endpoint in ckan4.3 Medium
- ibm maximo application suite - maximo mobile for eam, maximo mobile for eam +1 moreIBM Maximo Application Suite information disclosure5.1 Medium
- go-vela workerInsecure Variable Substitution in Vela7.7 High
- freescoutSMTP Mail Credentials Disclosed in Error Log in freescout7.1 High
- hitachi cosminexus component containerInformation Exposure Vulnerability in Cosminexus Component Container5.6 Medium
- apple macos, ios and ipados, ipad os +1 more +3 moreA privacy issue was addressed by not logging contents of text fields. This issue is fixed in...3.3 Low
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F information disclosure4.3 Medium
- jenkins mq notifier, jenkins project mq notifier plugin +1 moreJenkins MQ Notifier Plugin exposes sensitive information in build logs6.5 Medium
- apache linkis, apache software foundation linkis datasource +1 moreApache Linkis DataSource: DataSource module Oracle SQL Database Password Logged5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure6.5 Medium
- unisys stealthAn issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information...7.5 High
- ibm cloud pak for security, qradar suite, qradar suite software +2 moreIBM QRadar Suite information disclosure4.0 Medium
- ibm cloud pak for security, qradar suite, qradar suite software +2 moreIBM QRadar Suite information disclosure5.1 Medium
- ibm cloud pak for security, qradar suite, qradar suite software +2 moreIBM QRadar Suite information disclosure5.1 Medium
- ibm cloud pak for security, qradar suite, qradar suite software +2 moreIBM QRadar Suite information disclosure5.1 Medium
- gambioCleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive...2.7 Low
- rancherRancher 'Audit Log' leaks sensitive information8.4 High
- dell appsync, emc appsync +1 moreDell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain...6.2 Medium
- n-able passportalThe N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log...7.5 High
- elastic apm serverAPM Server Insertion of Sensitive Information into Log File5.7 Medium
- jetbrains riderIn JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was...3.3 Low
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreGlance-store: glance store access key logged in debug log level5.5 Medium
- 3ds delmia aprisoInsertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 20244.4 Medium
- hashicorp vault, vault enterprise +1 moreVault May Expose Sensitive Information When Configuring An Audit Log Device4.5 Medium
- splunk add-on builderSensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder8.2 High
- splunk add-on builderSession Token Disclosure to Internal Log Files in Splunk Add-on Builder8.8 High
- goreleaser`goreleaser release --debug` shows secrets5.5 Medium
- otrsUnnecessary data is written to log if issues during indexing occurs4.9 Medium
- apache airflow, apache software foundation airflow cncf kubernetes provider, apache apache-airflow-providers-cncf-kubernetes +2 moreApache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service6.5 Medium
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- splunk, splunk enterprise, cloud +2 moreServer Response Disclosure in RapidDiag Salesforce.com Log File4.3 Medium
- byzoro smart s150 management platform, smart s150, smart s150 firmware +2 moreByzoro Smart S150 Management Platform Backup File download.php information disclosure3.1 Low
- Show moreLoading…