cve.bz

CWE-532: Insertion of Sensitive Information into Log File, page 24

Filter

The product writes sensitive information to a log file.

What the weakness is: CWE-532 at MITRE

Ask an AI about CWE-532

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-532: Insertion of Sensitive Information into Log File and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/532.html and https://cve.bz/cve/cwe/532?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2018-20956EPSS 0.4%

    Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31.

  2. 4.9CVE-2019-1961EPSS 1.9%

    A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the im…

  3. 6.5CVE-2019-1953EPSS 1.5%

    A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging the admin password wh…

  4. 6.5CVE-2019-10370EPSS 1.3%

    Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.

  5. 5.5CVE-2019-10367EPSS 0.4%

    Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.

  6. 4.4CVE-2019-4284EPSS 0.4%

    IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512.

  7. 2.7CVE-2017-18426EPSS 0.7%

    cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).

  8. 3.3CVE-2017-18423EPSS 0.4%

    In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).

  9. 2.5CVE-2017-18412EPSS 0.3%

    cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).

  10. 6.5CVE-2016-10819EPSS 1.1%

    In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).

  11. 5.5CVE-2019-10364EPSS 0.3%

    Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.

  12. 6.5CVE-2019-10358EPSS 1.0%

    Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.

  13. 5.5CVE-2019-10345EPSS 0.3%

    Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.

  14. 3.3CVE-2019-10343EPSS 0.4%

    Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied.

  15. 2.3CVE-2019-10165EPSS 0.4%

    OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs…

  16. 7.5CVE-2019-0202EPSS 2.0%

    The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not …

  17. 6.5CVE-2019-14268EPSS 1.1%

    In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in …

  18. 4.3CVE-2019-11273EPSS 1.0%

    Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to tho…

  19. 6.5CVE-2019-13098EPSS 1.3%

    The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on…

  20. 7.5CVE-2019-13509EPSS 3.7%

    In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is r…

  21. 5.5CVE-2019-10194EPSS 0.3%

    Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics …

  22. 6.5CVE-2018-19583EPSS 1.6%

    GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.

  23. 5.5CVE-2019-4299EPSS 0.3%

    IBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain highly sensitive information from log files when debugging is enabled. IBM X-Force ID: 160765.

  24. 3.3CVE-2019-4296EPSS 0.3%

    IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from the client debug log file. IBM X-Force ID: 160759.

  25. 5.3CVE-2019-1622ExploitEPSS 79%

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improp…

  26. 4.4CVE-2019-4225EPSS 0.4%

    IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 159242.

  27. 7.8CVE-2019-11271EPSS 0.3%

    Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are containe…

  28. 9.8CVE-2019-3888EPSS 3.0%

    A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowL…

  29. 8.8CVE-2019-9929EPSS 2.0%

    Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.

  30. 8.1CVE-2019-11336EPSS 3.2%

    Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerabil…

  31. 5.9CVE-2019-6158EPSS 1.5%

    An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects L…

  32. 7.5CVE-2019-11492EPSS 1.1%

    ProjectSend before r1070 writes user passwords to the server logs.

  33. 7.5CVE-2019-9734EPSS 1.6%

    Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.

  34. 7.5CVE-2019-9724EPSS 1.4%

    aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component.

  35. 7.5CVE-2019-6157EPSS 1.3%

    In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.

  36. 5.3CVE-2015-1343EPSS 0.8%

    All versions of unity-scope-gdrive logs search terms to syslog.

  37. 7.8CVE-2019-3891EPSS 0.7%

    It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials t…

  38. 8.8CVE-2019-9976EPSS 1.0%

    The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.

  39. 7.8CVE-2019-0032EPSS 0.4%

    A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to…

  40. 5.5CVE-2019-4143EPSS 0.4%

    The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348.

  41. 7.8CVE-2019-3830EPSS 0.4%

    A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.

  42. 7.5CVE-2018-16856EPSS 0.9%

    In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information…

  43. 9.8CVE-2019-7612EPSS 2.4%

    A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently …

  44. 7.5CVE-2018-19513EPSS 2.1%

    In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates explo…

  45. 7.0CVE-2018-18466EPSS 0.3%

    An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by…

  46. 5.5CVE-2018-17499EPSS 0.2%

    Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, …

  47. 7.8CVE-2019-3716EPSS 0.4%

    RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log f…

  48. 5.5CVE-2019-3715EPSS 0.3%

    RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may ob…

  49. 7.5CVE-2019-0741EPSS 7.4%

    An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.

  50. 6.5CVE-2019-8944EPSS 1.5%

    An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.