Insertion of Sensitive Information Into Debugging Code

The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

CVEs (27)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-22194 1Lfprojects 2Case Python Utilities Cdo Local Uuid Utility Jun 17, 2026 Jan 11, 2024 N/A· v4 2.8 LOW· v3 N/A· v2 cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at ve...Show more cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`. Show less
CVE-2023-51390 1Aiven 1Journalpump Jun 17, 2026 Dec 21, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to t...Show more journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.Show less
CVE-2023-21462 1Samsung 1Quick Share Jun 17, 2026 Mar 16, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
CVE-2022-0721 1Microweber 1Microweber Jun 17, 2026 Feb 23, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.
CVE-2018-1002104 1Kubernetes 1Nginx Ingress Controller Nov 21, 2024 Jan 14, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
CVE-2019-3781 1Cloudfoundry 1Command Line Interface Jun 17, 2026 Mar 7, 2019 N/A· v4 8.8 HIGH· v3 3.5 LOW· v2 Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or al...Show more Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.Show less
CVE-2018-1191 1Cloudfoundry 2Cf Deployment Garden Runc Release Nov 21, 2024 Mar 29, 2018 N/A· v4 8.8 HIGH· v3 3.5 LOW· v2 Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using thos...Show more Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials.Show less

Previous 12