CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi ops center common servicesInformation exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA5.5 Medium
- webtoffee wordpress backup & migrationWordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability5.9 Medium
- metabaseSnowflake credentials logged by the Metabase backend1.8 Low
- azuread microsoft-identity-webMicrosoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs4.7 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log6.8 Medium
- apache pulsar, apache software foundation pulsar io kafka connect adaptor, pulsar io kafka connector +2 moreApache Pulsar IO Kafka Connector, Apache Pulsar IO Kafka Connect Adaptor: Sensitive information logged in Pulsar's Apache Kafka Connectors6.3 Medium
- elastic defendElastic Defend Insertion of Sensitive Information into Log Files6.5 Medium
- microsoft azure local clusterAzure Local Cluster Information Disclosure Vulnerability6.8 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file3.3 Low
- canonical get-workflow-version-actioncanonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output8.2 High
- smackcoders aio performance profiler, monitor, optimize, compress & debugWordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.3 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.4 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log4.3 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability5.5 Medium
- splunk, splunk enterprise, secure gateway +2 moreSensitive Information Disclosure in Splunk Secure Gateway App7.1 High
- oddlama kanidm-provisionkanidm-provision leaks provisioned admin credentials into the system log7.6 High
- docker buildxSecrets leakage to telemetry endpoint via cache backend configuration via buildx4.1 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager...5.9 Medium
- snowflake jdbc, snowflakedb snowflake-jdbc +1 moreSnowflake JDBC Driver client-side encryption key in DEBUG logs3.3 Low
- schneider electric ecostruxure panel serverCWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause...4.0 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +28 more +30 moreWindows NTFS Information Disclosure Vulnerability4.6 Medium
- sap se web dispatcher and internet communication managerInformation Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager4.9 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs6.5 Medium
- docker desktopExposure of Proxy Credentials in Docker Desktop Logs5.2 Medium
- ray-project rayray vulnerable to Insertion of Sensitive Information into Log File5.7 Medium
- ibm security verify bridge directory sync, security verify gateway for radius, security verify gateway for windows login +2 moreIBM Security Verify Bridge information disclosure3.3 Low
- genetechproducts pie register – user registration, profiles & content restriction, genetechsolutions pie register +1 moreRegistration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.4 - Sensitive Information Exposure via Log Files5.3 Medium
- checkmkLDAP credentials logged to Apache error log5.6 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav encryption key is logged in the debug logs8.6 High
- No product listedA security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non...5.1 Medium
- 2n osUsing API in the 2N OS device, authorized user can enable logging, which discloses valid...4.3 Medium
- huawei harmonyosVulnerability of improper log information control in the UI framework module Impact: Successful...6.6 Medium
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability6.7 Medium
- dualcube moowoodleWordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability7.5 High
- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3,...8.0 High
- richardoc kube-audit-restkube-audit-rest's example logging configuration could disclose secret values in the audit log5.1 Medium
- abb flxeonInformation disclosures6.9 Medium
- red hat data gridOrg.infinispan-infinispan-parent: exposure of sensitive information in application logs5.5 Medium
- apple macosThe issue was resolved by sanitizing logging. This issue is fixed in macOS Sonoma 14.7.2, macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macos, safari +1 moreA logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia...7.5 High
- otrs ag ((otrs)) community edition, otrs +1 moreSMTP Password will be shown in cleartext on some SMTP errors6.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure4.3 Medium
- github codeql-actionCodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts7.1 High
- himmelblau-idm himmelblauHimmelblau leaks credentials in the debug log3.2 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs5.5 Medium
- ibm urbancode deployIBM UrbanCode Deploy information disclosure6.2 Medium
- fortra application hubSensitive Information Disclosure in Fortra Application Hub Prior to version 1.35.5 Medium
- octopus deploy kubernetes worker or kubernetes agentIn affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be...6.5 Medium
- Show moreLoading…