CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- langchain-ai langsmith-sdkLangSmith SDK: Streaming token events bypass output redaction5.3 Medium
- splunk mcp serverSensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app7.2 High
- oxia-db oxiaOxia: Bearer token exposed in debug log messages on authentication failure8.7 High
- authzed spicedbSpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs6.0 Medium
- purestorage flashbladeSensitive Information Logging Vulnerability in FlashBlade8.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause ...2.4 Low
- apache airflowApache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI7.5 High
- apache tomcatApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token7.5 High
- control system alanweb scada, hydrosystem.poznan control system +1 moreInsertion of Sesitive Information into Log File in AlanWeb SCADA6.9 Medium
- dell elastic cloud storage, objectscale +1 moreDell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4...7.8 High
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreMultiple Vulnerabilities affect IBM Tivoli Netcool Impact8.4 High
github.com/cloudnativelabs/kube-routerGo,github.com/cloudnativelabs/kube-router/v2Go +1 morekube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level4.1 Medium- apache cassandraApache Cassandra: cqlsh history sensitive information leak5.5 Medium
- haxtheweb haxiamHAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses8.7 High
- filezilla-project filezilla, filezilla client +1 moreFileZilla 3.40.0 Denial of Service via Local Search6.9 Medium
- floragunn search guard flx, search-guard flx +1 moreSearch Guard audit logs can contain under certain conditions user credentials4.9 Medium
- openbmb xagentOpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file5.1 Medium
- opentext idm driver and extensionsInsertion of Sensitive Information into Log File7.3 High
github.com/goharbor/harborGoHarbor: LDAP password and OIDC secret are not redacted in the audit log6.9 Medium- ibm knowledge catalog standard cartridge, knowledge catalog +1 moreMultiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge4.4 Medium
- apple ipados, macos, visionos +2 more +4 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and...5.5 Medium
- openclawOpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs8.7 High
- openclawOpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes8.6 High
- hackerbay oneuptimeOneUptime: Password Reset Token Logged at INFO Level6.9 Medium
github.com/OliveTin/OliveTinGoOliveTin's email argument makes compliance harder, enables log injection6.9 Medium- lenovo filezA potential vulnerability was reported in the Lenovo FileZ Android application that, under...2.4 Low
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise6.3 Medium
- hcl sametimeHCL Sametime for Android is affected by sensitive information disclosure3.3 Low
- lupinlin1 jimeng web mcp serverAn issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered...5.3 Medium
- apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 moreApache ZooKeeper: Sensitive information disclosure in client configuration handling7.5 High
- hclsoftware sametime for ios, hcltech sametime +1 moreHCL Sametime for iOS is affected by sensitive information disclosure3.3 Low
- backstage, linuxfoundation backstage\/plugin-scaffolder-backend +1 more@backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass2.0 Low
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file4.3 Medium
- suse rancher, rancher backup and restore operator +1 moreRancher Backup Operator pod's logs leak S3 tokens6.8 Medium
- google androidIn multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token...7.7 High
github.com/filecoin-project/curioGoCurio exposes database credentials to users with network access through verbose HTTP error responses7.1 High- linode terraform-provider-linode, terraform linode provider +1 moreTerraform Provider Debug Logs Vulnerable to Sensitive Information Exposure5.0 Medium
- hitachi configuration manager, ops center api configuration manager +1 moreInformation Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager4.7 Medium
- hitachi configuration manager, device manager, ops center api configuration manager +2 moreInformation Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager5.2 Medium
- apache airflowApache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli6.5 Medium
- tanium interact, tds +1 moreTanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.6.5 Medium
- tanium trendsTanium addressed an insertion of sensitive information into log file vulnerability in Trends.6.5 Medium
- tanium tanosTanium addressed an insertion of sensitive information into log file vulnerability in TanOS.5.3 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk Enterprise6.8 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk Enterprise6.8 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in ''_internal'' index in Splunk Enterprise6.8 Medium
- Show moreLoading…