CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, visionos +2 more +4 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and...2.0 Low
- sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 moreA potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances...4.5 Medium
- apache apisixApache APISIX: basic-auth logs plaintext credentials at info level7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature4.6 Medium
- zohocorp manageengine endpoint centralSensitive Information Logged3.2 Low
- suse rancherRancher exposes sensitive information through audit logs4.3 Medium
- quickcreator – ai blog writerQuickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure7.5 High
- openbaoOpenBao and Vault Leak []byte Fields in Audit Logs5.7 Medium
- openbaoOpenBao leaks HTTPRawBody in Audit Logs5.7 Medium
- fortinet fortidlp, fortidlp agent +1 moreA insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11...4.2 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability4.9 Medium
- steadycontent content writerContent Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows State Repository API Server File Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows ETL Channel Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2025, windows server 2025 (server core installation) +1 more +3 moreMicrosoft Failover Cluster Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability6.2 Medium
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0...2.6 Low
- elastic elasticsearchElasticsearch Insertion of sensitive information in log file5.7 Medium
- go standard library crypto/tls, golang go +1 moreALPN negotiation error contains attacker controlled information in crypto/tls5.3 Medium
- webfactory wp resetWP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log5.3 Medium
- ibm transformation extender advancedIBM Transformation Extender Advanced information disclosure1.9 Low
- ibm watsonx.dataIBM watsonx.data information disclosure3.3 Low
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File5.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions8.4 High
- ilevia srl. eve x1 server, ilevia eve x1 server firmware +1 moreIlevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure9.3 Critical
- apple ipados, macos, tvos +4 more +6 moreA logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26,...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26,...5.5 Medium
- palo alto networks cortex xdr microsoft 365 defender packCortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials2.4 Low
- hoverflyHoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.7.8 High
- dell powerprotect data managerDell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of...8.8 High
- axxonsoft axxon one, axxonnet arp agent c-werknet +1 moreHardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs6.7 Medium
- kubernetes secrets-store-sync-controllerKubernetes secrets-store-sync-controller discloses service account tokens in logs6.5 Medium
- nvidia cumulus linux, nvos +1 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are...5.5 Medium
- upkeeper managerInsertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper...8.8 High
- endress+hauser promag 10 with hart, promag 10 with io-link, promag 10 with modbus +3 more +5 moreEndress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions7.4 High
- ibm app connect enterprise certified container, app connect enterprise certified containers operands, app connect operator +2 moreIBM App Connect Enterprise information disclosure5.9 Medium
- edgelesssys contrastEdgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure8.5 High
- traptitech traqInsertion of Sensitive Information into Log File in github.com/traPtitech/traQ5.9 Medium
- arista networks eosOn affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and proto…3.8 Low
- minova information services gmbh ttaMINOVA TTA Information Disclosure and Credential Exposure9.3 Critical
- backstage@backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`2.6 Low
- dell openmanage enterpriseDell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive...4.8 Medium
- No product listedInsertion of sensitive information into log file for some Intel(R) Local Manageability Service...4.8 Medium
- sap se netweaver as for abap and abap platform(internet communication manager)Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)4.1 Medium
- yugabytedb inc anywhereShared Access Signature token is not masked in the backup configuration response and is also...6.8 Medium
- bmc control-m, control-m/server, control-m\/server +2 moreBMC Control-M/Server cleartext database credentials in process lists and logs4.8 Medium
- himmelblau-idm himmelblauHimmelblau leaks an Intune service access token in its logs2.8 Low
- nvidia omniverse launcherNVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs,...5.5 Medium
- dell techadvisor, xtremio management server +1 moreTechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contain(s) an Insertion of...8.8 High
- dell xtremio, techadvisor, xtremio management server +2 moreDell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File...8.8 High
- Show moreLoading…