CWE-534: Information Exposure Through Debug Log Files
Filter
deprecated by MITRE see CWE-532
This entry has been deprecated because its abstraction was too low-level. See CWE-532.
What the weakness is: CWE-534 at MITRE. All weaknesses
Ask an AI about CWE-534
Show the prompt
Explain CWE-534: Information Exposure Through Debug Log Files and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/534.html and https://cve.bz/cve/cwe/534?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.6CVE-2023-5028EPSS 0.3%
A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log fi…
- 2.3CVE-2021-3037EPSS 0.3%
An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext user…
- 5.5CVE-2020-2004EPSS 0.3%
Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app (also known as GlobalProtect Agent) for MacOS and Windows. For this…
- 8.8CVE-2017-11398ExploitEPSS 8.2%
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a v…
- 9.8CVE-2015-6941EPSS 2.9%
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.