CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, ios and ipados, iphone os +2 moreThe issue was resolved by sanitizing logging. This issue is fixed in iOS 26.3 and iPadOS 26.3,...3.3 Low
- apple macosA logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...3.3 Low
- aveva pi to connect agentInsertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- axis camera station proAXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server...7.8 High
- rageagainstthepixel unity-cliunity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)5.9 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy Exposes Sensitive Data via Application Logs8.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs6.5 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.9 Medium
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks8.1 High
- neo4j community edition, enterprise edition +1 moreUnredacted data exposure in query.log4.8 Medium
- rustfsRustFS Logs Sensitive Credentials in Plaintext6.9 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM leaks a heap address when PIL throws an error9.8 Critical
- llamastack llama stackLlama Stack exposes secret in initialization log3.2 Low
- b&r industrial automation gmbh process visualization interface (pvi)Insertion of Sensitive Information into Logfile5.1 Medium
- ibm aspera consoleMultiple vulnerabilities in IBM Aspera Console4.9 Medium
- apache linkisApache Linkis: Password Exposure6.5 Medium
- absolute secure accessInformation Disclosure in Secure Access Between 12.70 and 14.204.6 Medium
- apple macosA logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...5.5 Medium
- rustfsRustFS RPC signature verification logs shared secret2.9 Low
- apache airflowApache Airflow: proxy credentials for various providers might leak in task logs7.5 High
- pimcorePimcore ENV Variables and Cookie Informations are exposed in http_error_log8.6 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Kernel Information Disclosure Vulnerability6.2 Medium
- software-metadata.pub hermeshermes's raw options logging may disclose secrets passed in via subcommand options argument5.9 Medium
- fujitsu / fsas technologies eternus sf acm/sc/expressFujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8...5.6 Medium
- turms-im turmsTurms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in...6.0 Medium
- wpmudev hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdnHummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreA logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...3.3 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop App logging sensitive information and fails to clear data on server deletion3.3 Low
- hp poly tcos, poly videoos, hp inc poly eagleeye cube +15 more +17 morePoly Video - Sensitive Data Might Be Written to Log File8.1 High
- apple macos, visionos, watchos +1 more +3 moreA logging issue was addressed with improved data redaction. This issue is fixed in macOS Sonoma...5.5 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- docker desktopExpired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs2.4 Low
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0...6.3 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service Information Disclosure6.5 Medium
- request serious play llc serious play, serious play pro +1 moreReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure20208.7 High
- medtronic carelink networkMedtronic CareLink Network allows a local attacker with access to log files on an internal API...4.1 Medium
- ansible-collections ansible community general collection, red hat ceph storage 5, ceph storage 6 +5 more +7 moreAnsible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output5.5 Medium
- coderCoder logged sensitive objects unsanitized7.8 High
- gitlabInsertion of Sensitive Information into Log File in GitLab2.0 Low
- splunk add-on for palo alto networksSensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks2.7 Low
- syrotech sy-gpon-1110-wdont firmwareAn issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers...9.0 Critical
- upkeeper managerInsertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper...7.3 High
- fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC...3.9 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows License Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows License Manager Information Disclosure Vulnerability5.5 Medium
- netgear wax610, wax610 firmware, wax610y +1 more +3 moreCredentials recorded in logs in NETGEAR WAX610 and WAX610Y0.5 Low
- ce21com ce21 suiteCE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation9.8 Critical
- apple ipados, macos, ios and ipados +1 more +3 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and...5.5 Medium
- Show moreLoading…