CWE-532

1,137 vulnerabilities with CWE-532

CVE-2019-5532 HIGH

VMware vCenter Server < 6.7 U3, < 6.5 U3, < 6.0 U3j - Credential Disclosure in OVF Deployment Logs

CVSS 7.7

CVE-2019-3763 HIGH

RSA Identity Governance and Lifecycle < 7.1.0 P08 - Authenticated Information Exposure via Office 365 Connector

CVSS 8.8

CVE-2019-11465 MEDIUM

Couchbase Server <5.5.3, 6.0.0 - Info Disclosure

CVSS 5.3

CVE-2019-11549 MEDIUM

GitLab <11.8.9-11.10.2 - Info Disclosure

CVSS 6.5

CVE-2019-6648 MEDIUM

F5 Container Ingress Service 1.9.0 - Sensitive Information Disclosure in Log Files

CVSS 4.4

CVE-2019-11250 MEDIUM

Kubernetes < 1.16.0-beta.1 - Sensitive Information Disclosure in Logs via High Verbosity Level

CVSS 6.5

CVE-2019-15294 CRITICAL

Gallagher Command Centre 8.10 < 8.10.1092 - Sensitive Information Disclosure in Log File

CVSS 9.8

CVE-2019-15508 MEDIUM

Octopus Tentacle 3.0.8-5.0.0 - Authenticated Sensitive Information Disclosure in Deployment Log

CVSS 6.5

CVE-2019-15507 MEDIUM

Octopus Server 2018.8.4-2019.7.6 - Authenticated Sensitive Information Disclosure in Deployment Log

CVSS 6.5

CVE-2019-5634 MEDIUM

Hickory Smart < 01.01.43 - Sensitive Information Exposure in Debug Log

CVSS 6.5

CVE-2019-13515 MEDIUM

OSIsoft PI Web API < 2018 - Sensitive Information Disclosure in Log Files

CVSS 6.5

CVE-2019-1961 MEDIUM

Cisco Enterprise NFV Infrastructure Software < 3.10.1 - Authenticated Arbitrary File Read via Tar Package Upload

CVSS 4.9

CVE-2019-1953 MEDIUM

Cisco Enterprise NFV Infrastructure Software < 3.9.1 - Authenticated Password Exposure in Web Portal Log

CVSS 6.5

CVE-2019-10370 MEDIUM

Jenkins Mask Passwords Plugin < 2.12.0 - Plaintext Password Exposure in Configuration Form

CVSS 6.5

CVE-2019-10367 MEDIUM

Jenkins Configuration as Code Plugin < 1.26 - Sensitive Information Exposure in Log Files

CVSS 5.5

CVE-2019-4284 MEDIUM

IBM Cloud Private <3.1.2 - Privilege Escalation

CVSS 4.4

CVE-2019-10364 MEDIUM

Jenkins Amazon EC2 Plugin < 1.43 - Private Key Exposure in System Log

CVSS 5.5

CVE-2019-10358 MEDIUM

Jenkins Maven Integration Plugin < 3.3 - Sensitive Information Exposure in Build Log

CVSS 6.5

CVE-2019-10345 MEDIUM

Jenkins Configuration as Code Plugin < 1.20 - Insufficiently Protected Credentials

CVSS 5.5

CVE-2019-10343 LOW

Jenkins Configuration as Code Plugin < 1.24 - Sensitive Information Exposure in Log Files

CVSS 3.3

CVE-2019-10165 LOW

OpenShift Container Platform <4.1.3 - Info Disclosure

CVSS 2.3

CVE-2019-0202 HIGH

Apache Storm 0.9.1-incubating-1.2.2 - Unauthenticated Sensitive Information Exposure via Logviewer Endpoint

CVSS 7.5

CVE-2019-14268 MEDIUM

Octopus Deploy <2019.7.2 - Info Disclosure

CVSS 6.5

CVE-2019-11273 MEDIUM

Pivotal Container Service 1.3.0-1.3.6 and 1.4.0 - Authenticated Sensitive Information Exposure via Billing Database Logs

CVSS 4.3

CVE-2019-13098 MEDIUM

TronLink Wallet 2.2.0 - Sensitive Information Exposure via Log File

CVSS 6.5