CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- typo3Information Disclosure via Exception Handling/Logger in TYPO33.1 Low
- ibm db2IBM Db2 information disclosure5.5 Medium
- iterm2iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive...9.3 Critical
- milestone systems xprotect vmsSensitive Information in Driver’s Log File5.2 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.9 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.0 Medium
- gallagher command centre serverInsertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm...8.5 High
- apple macosThe issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app...5.5 Medium
- arcinfo pcvueUser credentials recorded in log files1.8 Low
- zammadZammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and...4.3 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability6.2 Medium
- checkmkLogging of sitesecret to automations log5.7 Medium
- apache nifiApache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log6.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav Information Disclosure Vulnerability5.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch passwords when debugging is enabled6.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSwitch passwords and authorization IDs are printed in the embedded MLS DB file5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreconfiguration secrets are logged in support-save4.4 Medium
- No product listedAnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes...7.5 High
- yugabytedb anywhereAn information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password...5.0 Medium
- yugabytedb anywhereAn information disclosure vulnerability exists in the backup configuration process where the SAS...5.7 Medium
- runatlantis atlantisGit credentials are exposed in atlantis logs8.5 High
- workos authkit-remixRefresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix2.1 Low
- workos authkit-nextjsRefresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs2.1 Low
- huawei emui, harmonyos +1 moreVulnerability of improper log printing in the Super Home Screen module Impact: Successful...4.0 Medium
- prasidhda woo manage fraud ordersWoo Manage Fraud Orders <= 2.6.1 - Unauthenticated Information Exposure via Log Files5.3 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple ipados, macos, tvos +4 more +6 moreAn information disclosure issue was addressed with improved private data redaction for log...5.5 Medium
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Connector for Python has sensitive data in logs5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- splunk, splunk enterprise +1 moreSensitive information disclosure in AdminManager logging channel4.9 Medium
- splunk, splunk enterprise +1 moreSensitive information disclosure in REST_Calls logging channel4.9 Medium
- checkmkSNMP and IMPI secrets written to audit log5.1 Medium
- fortra robot schedule enterprise, robot schedule +1 moreSensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.055.5 Medium
- palo alto networks expeditionExpedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure8.2 High
- directusDirectus inserts access token from query string into logs4.2 Medium
- red hat build of apache camel 4.4 for quarkus 3.8Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log5.3 Medium
- mediawikiImproper permissions handling in MediaWiki AbuseFilter5.3 Medium
- cisco nexus dashboard insights, nexus dashboard fabric controller, nexus dashboard orchestrator +2 moreCisco Nexus Dashboard Insights Information Disclosure Vulnerability6.3 Medium
- cisco nexus dashboard orchestrator, nexus dashboard fabric controller, data center network manager +1 more +3 moreCisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator Information Disclosure Vulnerability6.3 Medium
- oceanic software valeappImproper Access Control in Oceanic Software's ValeApp8.8 High
- ibm cloud pak for multicloud management, cloud pak for multicloud management monitoring +1 moreIBM Cloud Pak for Multicloud Management information disclosure4.4 Medium
- synology drive clientInsertion of sensitive information into log file vulnerability in proxy settings component in...6.5 Medium
- microsoft power platform terraform provider, terraform-provider-power-platform, terraform provider power platform +2 morePower Platform Terraform Provider has Improper Masking of Secrets in Logs8.8 High
- Show moreLoading…