CWE-779: Logging of Excessive Data
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability 5.4 Medium
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability 5.4 Medium
- pmmp pocketmine-mp PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT 6.9 Medium
- acronis cyber protect 17, cyber protect +1 more Denial of service due to insufficient input validation in authentication logging. The following... 5.3 Medium
- aio-libs aiohttp AIOHTTP Vulnerable to Cookie Parser Warning Storm 2.7 Low
- isc stork DoS attack against the Stork UI from an unauthenticated user 7.5 High
- livehelperchat live helper chat A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat... 5.4 Medium
- osc ondemand Open OnDemand Shell App closed websocket DoS 5.4 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 more Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs 6.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 more Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages 7.3 High
- oisf suricata Suricata oversized resource names utilizing DNS name compression can lead to resource starvation 7.5 High
- netwrix cososys endpoint protector, cososys unify +1 more Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote... 9.8 Critical
- salesagility suitecrm SuiteCRM v4 API Excessive log data DOS 8.6 High
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 more Glance-store: glance store access key logged in debug log level 5.5 Medium
- broadcom symantec identity governance and administration, symantec identity manager +1 more An authenticated user can supply malicious HTML and JavaScript code that will be executed in the... 5.4 Medium
- samsung account Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows... 4.0 Medium
- cveproject cve-services Potential secrets being logged to disk in CVE Services 7.5 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Insufficient scope checks allows adding unrelated audit log entries 4.3 Medium
- google android, samsung mobile devices +1 more Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows... 5.5 Medium
- samsung watch active2 plugin Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version... 5.5 Medium
- samsung watch active plugin Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151... 5.5 Medium
- samsung mobile galaxy watch3 plugin, samsung galaxy watch 3 plugin +1 more Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151... 5.5 Medium
- samsung galaxy watch plugin Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151... 5.5 Medium