CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos +1 moreA logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia...5.5 Medium
- switchbot app for ios/android"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file...5.9 Medium
- suse container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1, image sles15-sp4-manager-proxy-4-3-byos, image sles15-sp4-manager-proxy-4-3-byos-azure +10 more +12 moreMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 Medium
- pcl-community pcl2-cePCL Community Edition exposes login credentials in logs9.3 Critical
- hp poly clariti managerPoly Clariti Manager - Multiple Security Vulnerabilities5.7 Medium
- okta on-premises provisioning agentOkta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated...6.8 Medium
- gift pad co.,ltd. "region pay" app for androidInsertion of sensitive information into log file issue exists in "region PAY" App for Android...2.4 Low
RageAgainstThePixel/setup-steamcmdGitHub ActionsRageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs8.7 Highbuildalon/setup-steamcmdGitHub Actionsbuildalon/setup-steamcmd leaked authentication token in job output logs8.7 High- westermo weosAn issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can...6.3 Medium
- broadcom brocade ascg, brocade active support connectivity gateway +1 moreJSON Web Token (JWT) Exposure in Log Files7.1 High
- rucio helm-chartsrucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles6.9 Medium
- adguard for safariAn issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely...5.5 Medium
- dell ecs, objectscale, elastic cloud storage +2 moreDell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of...5.5 Medium
- directusDirectus doesn't redact tokens in Flow logs4.5 Medium
- directusDirectus doesn't redact sensitive user data when logging via event hooks4.2 Medium
- broadcom brocade sannav, brocade sannav +1 moreDaily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)6.7 Medium
- dell powerflex manager vm, powerflex manager +1 moreDell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive...4.3 Medium
- ivanti connect secureInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...6.5 Medium
- ivanti connect secure, policy secure +1 moreInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...5.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncomplete Redaction of Sensitive Information in MongoDB Server Logs4.4 Medium
- jenkins, jenkins openshift-sync-plugin, red hat openshift developer tools and services +2 moreJenkins-image: sensitive data disclosure when using openshift jenkins image6.5 Medium
- wireapp wire-ioswire-ios accidentally logs message contents4.1 Medium
- docker desktopExposure of system environment variables in Docker Desktop diagnostic logs5.2 Medium
github.com/go-viper/mapstructureGo,github.com/go-viper/mapstructure/v2Go +1 moremapstructure May Leak Sensitive Information in Logs When Processing Malformed Data5.3 Medium- snyk cliSnyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode2.4 Low
- openbaoOpenBao May Leak Sensitive Information in Logs When Processing Malformed Data4.5 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.1 Medium
io.root.io.sentry:sentry-androidRoot,io.root.io.sentry:sentry-android-replayRoot,io.sentry:sentry-androidMaven +1 more +3 moresentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+8.2 High- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure6.2 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ Node can log Basic Auth header from an HTTP request6.7 Medium
- pure storage flasharrayFlashArray KEK Logging Vulnerability5.1 Medium
- dell smart dock, pro smart dock sd25 firmware, pro thunderbolt 4 smart dock sd25tb4 firmware +2 moreDell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive...7.1 High
- erudika paraPara Inserts Sensitive Information into Log File for Facebook authentication6.2 Medium
- yiiframework yii2-redisYii 2 Redis may expose AUTH paramters in logs in case of connection failure5.1 Medium
- erudika paraPara Server Logs Sensitive Information6.2 Medium
- apple ipados, macos, visionos +2 more +4 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and...5.5 Medium
- edgelesssys contrastContrast before 1.8.1 Information Disclosure via Logging8.5 High
- fortinet fortiportalA insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0,...2.2 Low
- project-zot zotzot logs secrets5.5 Medium
- apache iotdbApache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication7.5 High
- apache iotdb, apache software foundation iotdb jdbc driver +1 moreApache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver7.5 High
- cloud foundry uaa, cloudfoundry uaa release, cloud foundry cf deployment +1 more +3 moreCVE-2025-22246 – UAA Private Key Exposure3.0 Low
- apple ipados, macos +1 moreA logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.7,...7.6 High
- docker desktopExposure in Docker Desktop logs of environment variables configured for running containers5.2 Medium
- mozilla firefox, thunderbird +1 moreLeaked library paths in Thunderbird for Android5.3 Medium
- snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 moreSnowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs3.3 Low
- snowflake odbcIn Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL...3.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs4.3 Medium
- checkmkRemote site authentication secrets written to web log7.1 High
- Show moreLoading…