CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- dell objectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information...5.5 Medium
- jahlives openssl encryptopenssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure8.7 High
- ibm storage scaleThe following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher7.1 High
- kyndryl-open-source hashi-vault-jshashi-vault-js: Vault token and secret values exposed in thrown errors5.8 Medium
- ibm db2IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.5.5 Medium
- mongodb schema builder cli, sql schema builder cli +1 moreInsufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI6.8 Medium
- apache airflowApache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext6.5 Medium
- mongodb driver, java driver +1 moreCleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization8.2 High
- redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 moreInsights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response7.1 High
- redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 moreInsights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()6.3 Medium
- No product listedInsertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel...5.9 Medium
- apache rangerApache Ranger: Logs contain replayable JWT bearer tokens6.5 Medium
- lmammino oidc-authorizerlmammino oidc-authorizer Lambda Authorizer handler.rs log file6.9 Medium
- wso2 api control plane, api manager, identity server +5 more +7 moreHeader Injection via Custom URL Configuration in Multiple WSO2 Products Allows Open Redirect and Log Forgery5.4 Medium
- hclsoftware hcl digital experience and digital experience composeHCL Digital Experience and Digital Experience Compose insufficiently protects credentials5.4 Medium
- cisco roomos, roomos software, roomos cloud +2 moreCisco RoomOS Logging Subsystem Information Disclosure Vulnerability5.7 Medium
- andritz 250 scala, hipase-250 +1 moreMissing authentication for logging-configuration endpoint5.3 Medium
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes7.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreCleartext password in logs5.8 Medium
- broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 moreHTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server3.3 Low
- ibm websphere application serverIBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information7.4 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file4.9 Medium
hubuum_clientcrates.ioHubuum client library (Rust): Sensitive data may be exposed through default diagnostics2.3 Low- jetbrains golandIn JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default3.5 Low
- n8nn8n before 1.123.64 Credential Exposure via LLM Node Execution Data5.1 Medium
- openclawOpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export4.1 Medium
- mwtcmi frogmanFrogman: Plaintext passwords and secrets persisted to audit log6.5 Medium
- aws bedrock-agentcoreSensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK5.7 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2...7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +10 more +12 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- evbee dc-80Sensitive information is written to logs9.2 Critical
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure6.2 Medium
- composerComposer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)4.7 Medium
- blakeblackshear frigateFrigate viewer can read logs exposing admin and camera credentials8.1 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...5.8 Medium
- stormshield network securityInformation leak in NSRPC client history4.3 Medium
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 moreOpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords6.5 Medium
- elastic kibanaInsertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure4.4 Medium
- ibm devops deploy, ucd - ibm devops deploy, ucd - ibm urbancode deploy +1 more +3 moreIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability6.2 Medium
- snowflake cliSnowflake CLI Sensitive Credential Exposure Through Debug Logging5.5 Medium
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information4.3 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposure5.5 Medium
web-auth/webauthn-symfony-bundlePackagistWebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs6.6 Medium- mattermostMattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors6.8 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.4 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab8.6 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreCommunity.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreCommunity.general: community.general keyring_info — os keyring passphrase returned in plaintext5.5 Medium
- theforeman foreman, red hat satellite 6.18, satellite 6.19 +1 more +3 moreForeman-mcp-server: mcp server: insecure sensitive http header sanitization6.2 Medium
- aiven-open pghoardPGHoard: Password written to debug log2.4 Low
- Show moreLoading…