CWE-532

Medium likelihood

Insertion of Sensitive Information into Log File

Parent: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory

The product writes sensitive information to a log file.

1,099 vulnerabilities with CWE-532
CVE-2018-3827 HIGH
Elastic Azure Repository < 6.2.4 - Log Information Exposure
CVSS 8.1
CVE-2018-1223 HIGH
Pivotal Cloud Foundry Container Runtime - Log Information Exposure
CVSS 8.8
CVE-2018-1198 HIGH
Pivotal Cloud Cache <1.3.1 - Info Disclosure
CVSS 8.8
CVE-2018-6599 MEDIUM
Orbic Wonder Rc555l Firmware - Log Information Exposure
CVSS 5.5
CVE-2018-3776 MEDIUM
Nextcloud Server < 11.0.5 - Log Information Exposure
CVSS 5.3
CVE-2018-7754 MEDIUM
Linux kernel <4.16.4rc4 - Info Disclosure
CVSS 5.5
CVE-2018-1999036 MEDIUM
Jenkins SSH Agent Plugin <1.15 - Info Disclosure
CVSS 6.5
CVE-2018-6971 HIGH
Vmware Horizon View Agents < 7.5.1 - Log Information Exposure
CVSS 7.8
CVE-2018-11717 CRITICAL
Zohocorp Manageengine Desktop Central - Log Information Exposure
CVSS 9.8
CVE-2018-11716 CRITICAL
Zohocorp Manageengine Desktop Central - Log Information Exposure
CVSS 9.8
CVE-2018-0042 CRITICAL
Juniper Contrail Service Orchestration - Log Information Exposure
CVSS 9.8
CVE-2018-2440 MEDIUM
SAP Dynamic Authorization Management - Log Information Exposure
CVSS 4.4
CVE-2018-10889 MEDIUM
Moodle < 3.3.7 - Log Information Exposure
CVSS 4.3
CVE-2018-10855 MEDIUM
Redhat Ansible Engine < 2.4.5 - Log Information Exposure
CVSS 5.9
CVE-2018-1072 MEDIUM
Ovirt < 4.2.2 - Log Information Exposure
CVSS 5.0
CVE-2018-7682 MEDIUM
Microfocus Solutions Business Manager - Log Information Exposure
CVSS 6.5
CVE-2018-7683 HIGH
Microfocus Solutions Business Manager - Log Information Exposure
CVSS 7.5
CVE-2018-12604 HIGH
GreenCMS 2.3.0603 - Info Disclosure
CVSS 7.5
CVE-2018-1117 MEDIUM
ovirt-ansible-roles <1.0.6 - Info Disclosure
CVSS 5.0
CVE-2018-1075 MEDIUM
Ovirt < 4.2.3 - Insufficiently Protected Credentials
CVSS 5.0
CVE-2018-0335 HIGH
Cisco Prime Collaboration - Information Disclosure
CVSS 7.8
CVE-2018-1241 HIGH
EMC Recoverpoint < 5.1.2 - Log Information Exposure
CVSS 8.8
CVE-2018-11320 CRITICAL
Octopus Server < 2018.5.1 - Log Information Exposure
CVSS 9.8
CVE-2018-8719 MEDIUM
WP Security Audit Log <3.1.1 - Info Disclosure
CVSS 5.3
CVE-2018-3817 MEDIUM
Elastic Logstash < 5.6.6 - Information Disclosure
CVSS 6.5
Details
Vulnerabilities 1,099
Exploit Likelihood Medium