CWE-532
Medium likelihoodInsertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
1,137 vulnerabilities with CWE-532
CVE-2023-39348
MEDIUM
Spinnaker - Sensitive Information Disclosure in GitHub Status Notification Logs
CVSS 4.0
CVE-2023-38733
MEDIUM
IBM Robotic Process Automation <23.0.1 - Info Disclosure
CVSS 4.3
CVE-2023-38732
MEDIUM
IBM Robotic Process Automation <21.0.8 - Info Disclosure
CVSS 4.3
CVE-2023-40338
MEDIUM
Jenkins Folders Plugin < 6.846.v23698686f0f6 - Information Exposure via Scan Organization Folder Log Error Message
CVSS 4.3
CVE-2023-32491
MEDIUM
Dell PowerScale OneFS 9.5.0.0-9.5.0.2 - Sensitive Information Disclosure via SNMPv3 Log Insertion
CVSS 6.3
CVE-2023-4108
MEDIUM
Mattermost 7.8.0-7.8.7 - Sensitive Information Disclosure in Audit Logs
CVSS 4.5
CVE-2023-36494
MEDIUM
F5OS-A - Sensitive Information Disclosure in Audit Logs
CVSS 4.4
CVE-2023-3993
MEDIUM
GitLab 14.3-16.0.7, 16.1-16.1.2, 16.2-16.2.1 - Sensitive Information Disclosure in Log Files
CVSS 4.9
CVE-2023-31426
MEDIUM
Brocade Fabric OS <9.1.1c, 8.2.3d, 9.2.0 - Info Disclosure
CVSS 6.8
CVE-2023-32468
MEDIUM
Dell ECS Streamer < 2.0.7.1 - Sensitive Data Exposure via Log File Insertion
CVSS 5.8
CVE-2023-20891
MEDIUM
VMware Tanzu Application Service for VMs and Isolation Segment 2.11.0-2.11.34 - Credential Disclosure in Audit Logs
CVSS 6.5
CVE-2023-32478
CRITICAL
Dell PowerStoreOS < 3.5.0.1 - Sensitive Information Disclosure via Log File Insertion
CVSS 9.0
CVE-2023-32455
MEDIUM
Dell Wyse ThinOS < 9.3.2102 - Unauthenticated Sensitive Information Disclosure via Log Files
CVSS 5.5
CVE-2023-32447
MEDIUM
Dell Wyse ThinOS < 9.4.2103 - Sensitive Information Disclosure via Log File
CVSS 5.5
CVE-2023-32446
MEDIUM
Dell Wyse ThinOS < 2303 (9.4.1141) - Unauthenticated Sensitive Information Disclosure via Log Files
CVSS 5.5
CVE-2023-26026
MEDIUM
Planning Analytics Cartridge - Info Disclosure
CVSS 5.3
CVE-2023-26023
MEDIUM
Planning Analytics Cartridge - Info Disclosure
CVSS 6.5
CVE-2023-37224
MEDIUM
Archer Platform < 6.13.0.1 - Authenticated Sensitive Information Exposure via Log Files
CVSS 6.0
CVE-2023-3363
LOW
Gitlab CE/EE <15.11.10, <16.0.6, <16.1.1 - Info Disclosure
CVSS 3.9
CVE-2023-20207
MEDIUM
Cisco Duo Authentication Proxy - Info Disclosure
CVSS 4.9
CVE-2023-38067
MEDIUM
JetBrains TeamCity < 2023.05.1 - Sensitive Information Disclosure in Agent Log
CVSS 4.3
CVE-2023-38064
MEDIUM
JetBrains TeamCity < 2023.05.1 - Sensitive Information Disclosure in Agent Log
CVSS 4.3
CVE-2023-35695
HIGH
Trend Micro Mobile Security Enterprise 9.8 SP5 - Sensitive Information Exposure via Log File Download
CVSS 7.5
CVE-2023-32392
MEDIUM
iPadOS < 16.5 - Sensitive Location Information Exposure via Log File
CVSS 5.5
CVE-2023-20885
MEDIUM
Cloud Foundry Notifications <63, SMB-volume <3.1.19, cf-nfs-volume 5.0.0-5.0.26 - Credential Exposure
CVSS 6.5
Details
Vulnerabilities
1,137
Exploit Likelihood
Medium