CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- wp 2faWordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- sonarsource sonarqubeSonarQube logs sensitive information4.9 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of authentication sessions in secure logs6.8 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of authentication sessions in secure logs6.8 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePasswords are stored in clear-text logs.6.2 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause...4.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Encrypted Credential Exposure via Log Files5.5 Medium
- octolize usps shipping for woocommerce – live rates, usps shipping for woocommerce-live rates +1 moreWordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- johnson controls software house c•cure 9000, johnsoncontrols c-cure 9000 firmware, software house c-cure 9000 siteserver +2 moreCCURE passwords exposed to administrators8.5 High
- code parrots easy forms for mailchimpWordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Sensitive Data Exposure via Log File vulnerability7.5 High
- chainguard-dev apkoapko Exposure of HTTP basic auth credentials in log output7.5 High
- lukman nakib debug log – manger toolWordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerability5.3 Medium
- getsentry sentrySlack integration leaks sensitive information in logs in Sentry2.0 Low
- ethyca fidesPartial Password Exposure Vulnerability in Fides Webserver Logs2.3 Low
github.com/goreleaser/goreleaserGogoreleaser shows environment by default6.2 Medium- fluxcd source-controllersource-controller leaks theAzure Storage SAS token into logs on connection errors5.1 Medium
- kubernetes azure-file-csi-driverKubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs6.5 Medium
- valtimo frontend-libraries, valtimo-platform valtimo-frontend-libraries +1 more@valtimo/components exposes access token to form.io9.8 Critical
- matrix-org matrix-sdk-cryptomatrix-sdk-crypto contains a log exposure of private key of the server-side key backup5.5 Medium
- alexacrm dynamics 365 integrationWordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability5.3 Medium
- ghostWordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability7.5 High
- ibm watson cp4d data storesIBM Watson CP4D Data Stores information disclosure6.2 Medium
- cloudorc soliduispaces_plugin/app.py in SolidUI 0.4.0 has an unnecessary print statement for an OpenAI key. The...7.5 High
- solarwinds serv-uArbitrary File Overwrite Vulnerability5.7 Medium
- jordy meow wp media cleaner, wordpress media cleaner +1 moreWordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node5.5 Medium
- solid plugins affiliateWordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability7.5 High
- jberet, red hat build of keycloak, data grid 8 +11 more +13 moreJberet: jberet-core logging database credentials6.5 Medium
- frédéric gilles fg joomla to wordpressWordPress FG Joomla to Wordpress plugin <= 4.20.2 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- jack arturo wp fusion liteWordPress WP Fusion Lite plugin <= 3.42.10 - Sensitive Data Exposure vulnerability4.3 Medium
- patrick posner simply static, simply static static +1 moreWordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability7.5 High
- newslettersWordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability7.5 High
- roamwifi r10Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If...6.5 Medium
- hitachi ops center administratorInformation Exposure Vulnerability in Hitachi Ops Center Administrator4.4 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save8.6 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.7.5 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key is stored in the DR log files7.5 High
- inisev backup migrationWordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsertion of Sensitive Information into Brocade SANnav Log File5.0 Medium
- adtribes product feed pro for woocommerceWordPress Product Feed PRO for WooCommerce plugin <= 13.3.1 - Sensitive Data Exposure vulnerability5.3 Medium
- hewlett packard enterprise hpe compute scale-up server 3200 serverHPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information6.8 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy information disclosure4.3 Medium
- apache solr operatorApache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials6.5 Medium
- convertkit, convertkit - email marketing\, email newsletter and landing pages +1 moreWordPress ConvertKit plugin <= 2.4.5 - Email Disclosure in Log File vulnerability5.3 Medium
- frederic gilles fg drupal to wordpress, fredericgilles fg drupal +1 moreWordPress FG Drupal to WordPress plugin <= 3.70.3 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- wpkube subscribe to comments reloadedWordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability5.3 Medium
- webtoffee wordpress backup & migration, backup and migration +1 moreWordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability3.7 Low
- searchiqWordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability7.5 High
- joel user spam removerWordPress User Spam Remover plugin <= 1.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- Show moreLoading…