CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- devolutions remote desktop managerAn information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows...5.5 Medium
- stylemixthemes masterstudy lms starter, masterstudy lms +1 moreWordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability5.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- red hat ansible automation platform execution environments, discovery 1 for rhel 9, ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: exposure of sensitive information in ansible vault files due to improper logging5.5 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.0 Medium
- opentext identity manager azuread driverSensitive Information logging in NetIQ Identity Manager Driver5.8 Medium
- edirectoryPossible Insertion of Sensitive Information into Log File Vulnerability6.5 Medium
- netiq identity manager rest driver, opentext identity manager rest driver 1.1.2.0200 +1 morePossible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager4.9 Medium
aws-sam-cliPyPISensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs5.7 Mediumsagemaker-trainingPyPIAWS SageMaker Training Toolkit logs CodeArtifact Authorization token5.6 Medium- siemens sinumerik 828d v4, sinumerik 840d sl v4, sinumerik one +2 moreA vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK...6.8 Medium
- siemens sinema remote connect clientA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)....4.8 Medium
- cisco smart license utilityA vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker...7.5 High
- hashicorp vault, vault enterprise +1 moreVault Leaks AppRole Client Tokens And Accessor in Audit Log6.2 Medium
- otrs, otrs ag ((otrs)) community edition +1 morePasswords are written to Admin Log Module8.2 High
- retoolRetool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into...6.5 Medium
- ai engine project engine, jordy meow ai engine +1 moreAI Engine < 2.5.1 - Admin+ RCE7.2 High
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability5.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +47 more +49 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...7.1 High
- theme-sphere smartmagWordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- elastic agentElastic Agent Insertion of Sensitive Information into Log File6.5 Medium
- rd labs llc whoThe com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places...3.3 Low
- elastic apm serverAPM Server Insertion of Sensitive Information into Log File5.7 Medium
- ibm business automation workflowIBM Business Automation Workflow information disclosure5.3 Medium
- fogprojectFOG has a Log Information Disclosure5.3 Medium
- limpinho ctt expresso para woocommerceCTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory5.3 Medium
- cato networks sdp client, catonetworks cato client +1 moreCato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover6.5 Medium
- elastic elasticsearchElasticsearch Insertion of Sensitive Information into Log File5.2 Medium
- apache arrow, apache software foundation arrow rust object store +1 moreApache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build...6.4 Medium
- canonical operatorThe ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command4.4 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreDB User Password Leak in Application Log5.4 Medium
- steeltoeoss discovery, kiteworks security-advisories +1 moreBasic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user6.3 Medium
- servit affiliate-toolkitWordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- trustedlogin, trustedlogin vendor +1 moreWordPress TrustedLogin Vendor plugin < 1.1.1 - Sensitive Data Exposure vulnerability5.3 Medium
- fortinet fortiaiopsMultiple Exposure of sensitive information to an unauthorized actor vulnerabilities [CWE-200] in...8.3 High
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can...4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special...4.3 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Linux Credential Leak6.8 Medium
- realtek rtsper, rtsuer +1 moreVulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355...5.5 Medium
- vmware cloud director object storage extensionVMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information...5.3 Medium
- ibm security verify accessIBM Security Verify Access information disclosure5.5 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreBitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin4.3 Medium
- checkmkAutomation user secrets written to audit log2.7 Low
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a...2.7 Low
- brocade fabric os, broadcom fabric operating system +1 morepassword management API prints sensitive information in log files5.9 Medium
- phloc webscopesAn information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with...9.3 Critical
- hashicorp retryablehttp, shared library +1 morego-retryablehttp can leak basic auth credentials to log files6.0 Medium
- Show moreLoading…