CWE-532

Medium likelihood

Insertion of Sensitive Information into Log File

Parent: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory

The product writes sensitive information to a log file.

1,137 vulnerabilities with CWE-532
CVE-2020-26199 MEDIUM
Dell EMC Unity, Unity XT, and UnityVSA < 5.0.4.0.5.012 - Plain-Text Password Storage in Log Files
CVSS 6.4
CVE-2020-0476 MEDIUM
Android 11 - Sensitive Information Disclosure via Assistant.java Log Leak
CVSS 4.4
CVE-2020-35234 HIGH
Easy WP SMTP < 1.4.4 - Administrator Account Takeover via Password Reset Link Exposure in Debug Log
CVSS 7.5
CVE-2020-26416 MEDIUM
GitLab 8.4.0-13.4.6 13.5.0-13.5.4 13.6.0-13.6.1 - Information Disclosure in Advanced Search
CVSS 4.0
CVE-2020-8566 MEDIUM
Kubernetes <1.19.3-<1.18.10-<1.17.13 - Info Disclosure
CVSS 4.7
CVE-2020-8565 MEDIUM
Kubernetes <= 1.19.3, <= 1.18.10, <= 1.17.13, < 1.20.0-alpha.2 - Sensitive Information Disclosure in Log Files
CVSS 4.7
CVE-2020-8564 MEDIUM
Kubernetes <v1.19.3,v1.18.10,v1.17.13 - Info Disclosure
CVSS 4.7
CVE-2020-8563 MEDIUM
Kubernetes <v1.19.3 - Info Disclosure
CVSS 4.7
CVE-2020-6317 LOW
SAP Adaptive Server Enterprise 15.7, 16.0 - Sensitive Information Exposure in Installation Log Files
CVSS 3.5
CVE-2020-4900 MEDIUM
IBM Business Automation Workflow 19.0.0.3 - Sensitive Information Exposure in Log Files
CVSS 5.5
CVE-2020-25640 MEDIUM
WildFly < 21.0.0 - Sensitive Information Disclosure in Resource Adapter Logs
CVSS 5.3
CVE-2020-10763 MEDIUM
Heketi < 10.1.0 - Sensitive Information Disclosure in Log Files
CVSS 5.5
CVE-2020-10762 MEDIUM
gluster-block <0.5.1 - Info Disclosure
CVSS 5.5
CVE-2020-4671 MEDIUM
IBM Sterling B2B Integrator 5.2.0.0-5.2.6.5 and 6.0.0.0-6.0.3.2 - Sensitive Information Exposure in Log Files
CVSS 6.5
CVE-2020-2048 LOW
PAN-OS 8.1.0-8.1.16 - Sensitive Information Exposure in Log Files
CVSS 3.3
CVE-2020-11646 MEDIUM
B&R GateManager 4260/9250 <9.0.20262 and 8250 <9.2.620236042 - Authenticated Log Information Disclosure
CVSS 4.3
CVE-2020-11643 MEDIUM
B&R GateManager 4260/9250 <9.0.20262 & 8250 <9.2.620236042 - Authenticated Info Disclosure via Log File Insertion
CVSS 6.5
CVE-2020-5389 MEDIUM
Dell EMC OpenManage Integration for Microsoft System Center < 7.2.1 - Sensitive Information Disclosure in Log Files
CVSS 6.5
CVE-2020-26605 HIGH
Samsung Mobile <Q(10.0),R(11.0) - Info Disclosure
CVSS 7.5
CVE-2020-25987 HIGH
MonoCMS Blog 1.0 - Hardcoded Credentials in Log File
CVSS 7.5
CVE-2020-9486 HIGH
Apache NiFi 1.10.0-1.11.4 - Sensitive Information Disclosure in Stateless Execution Engine Logs
CVSS 7.5
CVE-2020-15370 MEDIUM
Brocade Fabric OS <7.4.2g - Info Disclosure
CVSS 6.5
CVE-2020-14332 MEDIUM
Ansible Engine 2.8.0-2.8.13 - Sensitive Information Exposure in Module Args via Check Mode
CVSS 5.5
CVE-2020-14330 MEDIUM
Ansible Engine < 2.9.12 and Ansible < 2.10.0 - Sensitive Information Exposure in URI Module Logs
CVSS 5.0
CVE-2020-2044 LOW
PAN-OS 8.0.0-8.0.19 - Sensitive Information Exposure in opcmdhistory.log
CVSS 3.3
Details
Vulnerabilities 1,137
Exploit Likelihood Medium