CWE-532
Medium likelihoodInsertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
1,137 vulnerabilities with CWE-532
CVE-2018-16095
MEDIUM
Lenovo System Management Module Firmware < 1.06 - Sensitive Information Disclosure via Debug Log
CVSS 5.9
CVE-2018-1876
MEDIUM
IBM Robotic Process Automation with Automation Anywhere 11 - Sensitive Information Exposure in Log Files
CVSS 6.2
CVE-2018-17922
CRITICAL
Circontrol CirCarLife < 4.3.1 - Unauthenticated Cleartext Credential Exposure in Log File
CVSS 9.8
CVE-2018-1788
MEDIUM
IBM Spectrum Protect Server 7.1.0.0-7.1.8.9 - Sensitive Information Disclosure in Trace Logs
CVSS 4.1
CVE-2018-17447
HIGH
Citrix NetScaler SD-WAN 9.3.0-9.3.5 and SD-WAN 10.0.0-10.0.3 - Insertion of Sensitive Information into Log File
CVSS 7.5
CVE-2018-15763
CRITICAL
Pivotal Container Service < 1.2.0 - IaaS Credential Exposure in Application Logs
CVSS 9.0
CVE-2018-1264
CRITICAL
Cloud Foundry Log Cache < 1.1.1 - Sensitive Information Exposure via UAA Client Secret Logging
CVSS 9.1
CVE-2018-0504
MEDIUM
MediaWiki 1.27.0-1.27.4 and 1.31.0 - Information Disclosure in Special:Redirect/logid
CVSS 6.5
CVE-2018-16049
CRITICAL
GitLab 8.10.0-11.0.5, 11.1.0-11.1.4, 11.2.0-11.2.1 - Sensitive Data Disclosure in Sidekiq Logs
CVSS 9.8
CVE-2018-1768
MEDIUM
IBM Spectrum Protect Plus 10.1.0 and 10.1.1 - Sensitive Information Disclosure in Instrumentation Log File
CVSS 5.6
CVE-2018-3828
HIGH
Elastic Cloud Enterprise < 1.1.4 - Sensitive Information Exposure in Allocator Logs
CVSS 7.5
CVE-2018-3827
HIGH
Elasticsearch repository-azure - Sensitive Data Disclosure via TRACE Level Logging
CVSS 8.1
CVE-2018-1223
HIGH
Cloud Foundry Container Runtime < 0.14.0 - Sensitive Information Disclosure in Application Logs
CVSS 8.8
CVE-2018-1198
HIGH
Pivotal Cloud Cache <1.3.1 - Info Disclosure
CVSS 8.8
CVE-2018-6599
MEDIUM
Orbic Wonder RC555L Firmware - Sensitive Information Exposure via Android Log Dump to SD Card
CVSS 5.5
CVE-2018-3776
MEDIUM
Nextcloud Server 11.0.0-11.0.5 - Audit Log Bypass via Input Validation Issue
CVSS 5.3
CVE-2018-7754
MEDIUM
Linux kernel <4.16.4rc4 - Info Disclosure
CVSS 5.5
CVE-2018-1999036
MEDIUM
Jenkins SSH Agent Plugin <1.15 - Info Disclosure
CVSS 6.5
CVE-2018-6971
HIGH
VMware Horizon View Agents 7.0.0-7.5.0 - Local Information Disclosure via Insecure Logging
CVSS 7.8
CVE-2018-11717
CRITICAL
Zoho ManageEngine Desktop Central < 100251 - Sensitive Information Exposure in Log Files
CVSS 9.8
CVE-2018-11716
CRITICAL
ManageEngine Desktop Central < 100230 - Unauthenticated Sensitive Information Exposure via Log File Access
CVSS 9.8
CVE-2018-0042
CRITICAL
Juniper Contrail Service Orchestration < 4.0.0 - Sensitive Information Disclosure via Log File
CVSS 9.8
CVE-2018-2440
MEDIUM
SAP Dynamic Authorization Management - Sensitive Information Exposure in Application Logs
CVSS 4.4
CVE-2018-10889
MEDIUM
moodle 3.3.0-3.3.6, 3.5.0 - Sensitive Information Disclosure in Data Privacy Export Logs
CVSS 4.3
CVE-2018-10855
MEDIUM
Ansible 2.4-2.4.4 and 2.5.0a1-2.5.4 - Sensitive Information Disclosure in Log Files
CVSS 5.9
Details
Vulnerabilities
1,137
Exploit Likelihood
Medium