CWE-532
Medium likelihoodInsertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
1,137 vulnerabilities with CWE-532
CVE-2020-26199
MEDIUM
Dell EMC Unity, Unity XT, and UnityVSA < 5.0.4.0.5.012 - Plain-Text Password Storage in Log Files
CVSS 6.4
CVE-2020-0476
MEDIUM
Android 11 - Sensitive Information Disclosure via Assistant.java Log Leak
CVSS 4.4
CVE-2020-35234
HIGH
Easy WP SMTP < 1.4.4 - Administrator Account Takeover via Password Reset Link Exposure in Debug Log
CVSS 7.5
CVE-2020-26416
MEDIUM
GitLab 8.4.0-13.4.6 13.5.0-13.5.4 13.6.0-13.6.1 - Information Disclosure in Advanced Search
CVSS 4.0
CVE-2020-8566
MEDIUM
Kubernetes <1.19.3-<1.18.10-<1.17.13 - Info Disclosure
CVSS 4.7
CVE-2020-8565
MEDIUM
Kubernetes <= 1.19.3, <= 1.18.10, <= 1.17.13, < 1.20.0-alpha.2 - Sensitive Information Disclosure in Log Files
CVSS 4.7
CVE-2020-8564
MEDIUM
Kubernetes <v1.19.3,v1.18.10,v1.17.13 - Info Disclosure
CVSS 4.7
CVE-2020-8563
MEDIUM
Kubernetes <v1.19.3 - Info Disclosure
CVSS 4.7
CVE-2020-6317
LOW
SAP Adaptive Server Enterprise 15.7, 16.0 - Sensitive Information Exposure in Installation Log Files
CVSS 3.5
CVE-2020-4900
MEDIUM
IBM Business Automation Workflow 19.0.0.3 - Sensitive Information Exposure in Log Files
CVSS 5.5
CVE-2020-25640
MEDIUM
WildFly < 21.0.0 - Sensitive Information Disclosure in Resource Adapter Logs
CVSS 5.3
CVE-2020-10763
MEDIUM
Heketi < 10.1.0 - Sensitive Information Disclosure in Log Files
CVSS 5.5
CVE-2020-10762
MEDIUM
gluster-block <0.5.1 - Info Disclosure
CVSS 5.5
CVE-2020-4671
MEDIUM
IBM Sterling B2B Integrator 5.2.0.0-5.2.6.5 and 6.0.0.0-6.0.3.2 - Sensitive Information Exposure in Log Files
CVSS 6.5
CVE-2020-2048
LOW
PAN-OS 8.1.0-8.1.16 - Sensitive Information Exposure in Log Files
CVSS 3.3
CVE-2020-11646
MEDIUM
B&R GateManager 4260/9250 <9.0.20262 and 8250 <9.2.620236042 - Authenticated Log Information Disclosure
CVSS 4.3
CVE-2020-11643
MEDIUM
B&R GateManager 4260/9250 <9.0.20262 & 8250 <9.2.620236042 - Authenticated Info Disclosure via Log File Insertion
CVSS 6.5
CVE-2020-5389
MEDIUM
Dell EMC OpenManage Integration for Microsoft System Center < 7.2.1 - Sensitive Information Disclosure in Log Files
CVSS 6.5
CVE-2020-26605
HIGH
Samsung Mobile <Q(10.0),R(11.0) - Info Disclosure
CVSS 7.5
CVE-2020-25987
HIGH
MonoCMS Blog 1.0 - Hardcoded Credentials in Log File
CVSS 7.5
CVE-2020-9486
HIGH
Apache NiFi 1.10.0-1.11.4 - Sensitive Information Disclosure in Stateless Execution Engine Logs
CVSS 7.5
CVE-2020-15370
MEDIUM
Brocade Fabric OS <7.4.2g - Info Disclosure
CVSS 6.5
CVE-2020-14332
MEDIUM
Ansible Engine 2.8.0-2.8.13 - Sensitive Information Exposure in Module Args via Check Mode
CVSS 5.5
CVE-2020-14330
MEDIUM
Ansible Engine < 2.9.12 and Ansible < 2.10.0 - Sensitive Information Exposure in URI Module Logs
CVSS 5.0
CVE-2020-2044
LOW
PAN-OS 8.0.0-8.0.19 - Sensitive Information Exposure in opcmdhistory.log
CVSS 3.3
Details
Vulnerabilities
1,137
Exploit Likelihood
Medium