CWE-532
Medium likelihoodInsertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
1,138 vulnerabilities with CWE-532
CVE-2016-0879
HIGH
Moxa Secure Router EDR-G903 <3.4.12 - Info Disclosure
CVSS 7.5
CVE-2016-0875
HIGH
Moxa Secure Router EDR-G903 <3.4.12 - Info Disclosure
CVSS 7.5
CVE-2015-1343
LOW
Unity-Scope-GDrive - Info Disclosure
CVSS 2.0
CVE-2015-3243
MEDIUM
rsyslog - Sensitive Information Exposure via Weak Log File Permissions
CVSS 5.5
CVE-2015-8977
HIGH
MyBB Merge System < 1.8.6 and MyBB < 1.6.18 - Sensitive Information Disclosure via Error Log Files
CVSS 7.5
CVE-2014-3536
MEDIUM
CloudForms Management Engine 5 - Sensitive Information Exposure via Log File
CVSS 5.5
CVE-2013-1771
HIGH
monkey-project monkey - Sensitive Information Exposure via World-Readable Log File
CVSS 7.5
CVE-2013-6384
OpenStack Ceilometer >=2013.1 <2013.2 - Sensitive Information Exposure in Log Files
CVE-2013-4733
HIGH
Digital Alert Systems DASDEC EAS <2.0-2 - Info Disclosure
CVSS 7.5
CVE-2012-1156
HIGH
Moodle < 2.2.2 - Sensitive Information Exposure via Course Backup
CVSS 7.5
CVE-2012-0814
MEDIUM
OpenSSH < 5.7 - Authenticated Information Disclosure via Debug Messages
CVSS 6.5
CVE-2011-1943
NetworkManager <0.8.999-3 - Info Disclosure
CVE-2001-1556
Apache HTTP Server 1.3.0-1.3.30 - Log Injection via Control Characters
Details
Vulnerabilities
1,138
Exploit Likelihood
Medium