CWE-532: Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
A kind of CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory.
From the CWE List. © The MITRE Corporation.
Newest
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers6.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext user passwords6.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext private keys6.0 Medium
- red hat build of apache camel - hawtio 4Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level5.5 Medium
- No product listedAn issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in...4.9 Medium
- apple macosA logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and...5.5 Medium
- apache software foundation storm client, storm nimbus +1 moreApache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs10.0 Critical
- apache software foundation syncopeApache Syncope: AES Secret Key disclosure via log output7.5 High
- hashicorp toolingConsul-template vulnerable to an information disclosure issue in error handling7.7 High
- mend mend-renovate-enterprise-edition, renovatebot renovate, mend mend-renovate-ce +3 more +5 moreRenovate before 44.14.4 TLS Private Key Log Sanitisation8.3 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreCWE-532: Insertion of Sensitive Information into Log File3.3 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...3.3 Low
- suse neuvectorSensitive information is leaked into NeuVector’s manager container logs6.8 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- okta hyperdrive, hyperdrive agent +1 moreImproper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging5.3 Medium
- okta hyperdrive, hyperdrive integration plugin +1 moreImproper Credential Protection in Okta Hyperdrive Integration Installer Logging7.3 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Program Compatibility Assistant Service Information Disclosure Vulnerability5.5 Medium
- snowflake connector for python, go driver, jdbc driver +5 more +7 moreSensitive information written to logs by Snowflake drivers6.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log2.8 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- ibm app connect enterprise, integration bus for z/os, integration bus for z\/os +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs6.2 Medium
- ibm app connect enterprise, integration bus for z/os, integration bus for z\/os +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs5.1 Medium
- ibm app connect enterprise, integration bus for z/os, integration bus for z\/os +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs6.2 Medium
- siyuan-note siyuanSiYuan before v3.8.2 API Token Exposure via Log File8.7 High
- n8nn8n before 1.123.73 Credential Exposure via Error Logging7.1 High
- malach-it boruta-serverBoruta: OAuth credentials exposed in Boruta business logs6.5 Medium
- drupal mailer plus logMailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-1283.8 Low
- free5gcfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA3.7 Low
- adobe dimensionWatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs9.3 Critical
- mongodb c# driver, c\# driver +1 moreKMS master key exposure via unredacted credential serialization in driver settings string6.8 Medium
- spring cloud stream, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Stream3.1 Low
- spring cloud function, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Function Azure3.1 Low
- spring cloud function, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Function AWS3.1 Low
- mongodb bi connectorMongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied4.1 Medium
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Credential Exposure via Debug Output8.7 High
- jahlives openssl encryptopenssl-encrypt before 1.4.9 Password Cleartext Leak via Debug8.7 High
- hclsoftware bigfix quantum risk analyzerHCL BigFix Quantum Risk Analyzer is affected by logging sensitive information4.1 Medium
- veeam backup and replicationA vulnerability that records guest OS processing credentials in cleartext in a support log on the...6.8 Medium
io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringsslMavennetty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages8.1 High- frauscher sensortechnik fds 102Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives8.7 High
- octopus serverIn affected versions of Octopus Server under certain circumstances it is possible for sensitive...7.1 High
- splunk ad ldap app for splunk soarInformation Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR5.0 Medium
- splunk ad ldap app for splunk soarInformation Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR4.3 Medium
mcp-searxngnpmSearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses5.5 MediumgeolensPyPIGeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)No score- red hat advanced cluster management for kubernetes 2, advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +4 more +6 moreSubmariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity6.5 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMust-gather: /tmp/kubeconfig retention5.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log6.2 Medium
- Show moreLoading…