CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- vllmvLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router5.3 Medium
- apple macosA logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...5.5 Medium
- juev nebula-meshnebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)5.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Information Exposure Vulnerability on macOS4.4 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreKeyfile contents are in MongoDB Server logs6.8 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreSensitive data could be written to mongod.log6.8 Medium
- acer connect m6e 5g portable wifi router, connect m6e 5g firmware +1 morePlaintext Log Credential Leakage8.8 High
- genetec inc. security centerA high security vulnerability affecting Security Center main server installations has been...7.8 High
- admidioAdmidio writes session IDs and auto-login cookie values to application logs4.4 Medium
- acer wave 7 router, wave 7 firmware +1 moreAcer Wave 7 router: Broken Access Control10.0 Critical
- rustfsRustFS: Sensitive Information Leakage (SessionToken and SecretAccessKey) in RustFS Logs [Debug Mode]5.3 Medium
- tigera calico, calico cloud, calico enterprise +2 moreCalicoctl leaks cluster credentials to stderr when verbose logging is enabled7.2 High
- tigera calico, calico cloud, calico enterprise +2 moreServiceAccount token disclosure via Azure IPAM CNI plugin logs6.0 Medium
- tigera calicoServiceAccount token disclosure via install-cni container logs6.0 Medium
- veeam backup and replicationThis vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.7.3 High
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to a confidential disclosure5.5 Medium
- ibm mq operator, supplied mq advanced container images +1 moreMultiple vulnerabilities in IBM MQ Operator and Queue manager container images5.1 Medium
- ibm db2IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets5.5 Medium
- gallagher command centre, active directory sync, cardholder sync utility +14 more +16 moreInsertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service...8.1 High
- dell vxrailDell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail...6.7 Medium
- avantraLog Files contain encrypted secrets7.5 High
- netatalkLDAP simple-bind password exposure in log output7.5 High
- openbaoOpenBao's Inline Auth Incorrectly Redacted Headers5.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through Log Files in Splunk Enterprise7.5 High
shivammathur/setup-phpGitHub ActionsSetup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions5.9 Medium- hyperledger fabric-chaincode-javafabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode5.5 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages6.5 Medium
- dbt-labs dbt-mcp, getdbt dbt mcp server +1 moredbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled2.5 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +21 more +23 moreBIG-IP QKView vulnerability7.1 High
- mongodb, mongodb, inc. mongodb server +1 moreSchema validation log messages may not redact user data4.8 Medium
- dragonmonk111 junoclawJunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and...7.5 High
- apple macosA logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia...8.8 High
- apple ipados, macos, tvos +4 more +6 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and...7.5 High
- com.ritense.valtimo web, valtimo-platform valtimo +1 moreValtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer7.6 High
- apache apache-airflow-providers-elasticsearch, apache software foundation airflow providers elasticsearch +1 moreApache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL6.5 Medium
- apache apache-airflow-providers-opensearch, apache software foundation airflow providers opensearch +1 moreApache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL6.5 Medium
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Logged Sensitive Information4.4 Medium
- vercelVercel: Non-interactive mode includes CLI arguments in suggested command output5.5 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability8.3 High
- papercut hivePaperCut Hive (Ricoh): Plain text password in logs5.9 Medium
- No product listedThe Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12...7.5 High
- czlonkowski n8n-mcpn8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode4.3 Medium
- czlonkowski n8n-mcpn8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests5.3 Medium
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output5.3 Medium
- dell data domain operating system, powerprotect data domain appliances +1 moreDell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature...7.6 High
Meridian.MappingNuGet,Meridian.MediatorNuGet +1 moreMeridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)7.5 High- valtimo-platform valtimoValtimo: Sensitive data exposure through inbox message logging in InboxHandlingService4.9 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information...6.6 Medium
- apache airflowApache Airflow: JWT token appearing in logs7.5 High
- Show moreLoading…