← Back
CWE-532

1,220 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

JSON object

Loading...

CVEs (1,220)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-41618
1Davidlingren
1Media Library Assistant
Jun 17, 2026
Nov 18, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.
CVE-2022-43673
1Wire
1Wire
Jun 17, 2026
Nov 18, 2022
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppData\Roaming\Wire\IndexedDB\https_app.wire.com_0.indexeddb.lev...Show more
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppData\Roaming\Wire\IndexedDB\https_app.wire.com_0.indexeddb.leveldb database.Show less
CVE-2022-27895
1Palantir
1Foundry Build2
Jun 17, 2026
Nov 15, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 v...Show more
Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.Show less
CVE-2022-27896
1Palantir
1Foundry Code Workbooks
Jun 17, 2026
Nov 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs includ...Show more
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.Show less
CVE-2022-35719
1Ibm
1Mq Internet Pass Thru
Jun 17, 2026
Nov 14, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user.
CVE-2022-39893
1Samsung
1Galaxy Buds Pro Manage
Jun 17, 2026
Nov 9, 2022
N/A· v4
3.3 LOW· v3
N/A· v2
Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.
CVE-2022-44745
1Acronis
1Cyber Protect Home Office
Jun 17, 2026
Nov 7, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.
CVE-2022-27893
1Osisoft Pi Web Connector Project
1Osisoft Pi Web Connector
Jun 17, 2026
Nov 4, 2022
N/A· v4
4.2 MEDIUM· v3
N/A· v2
The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version...Show more
The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.Show less
CVE-2021-44862
1Netskope
1Netskope
Jun 17, 2026
Nov 3, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive info...Show more
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user. Show less
CVE-2022-44624
1Jetbrains
1Teamcity
Jun 17, 2026
Nov 3, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
CVE-2022-41553
1Hitachi
2Infrastructure Analytics Advisor
Ops Center Analyzer
Jun 17, 2026
Nov 1, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer pro...Show more
Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) allows local users to gain sensitive information. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00. Show less
CVE-2022-3191
1Hitachi
1Ops Center Analyzer
Jun 17, 2026
Nov 1, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information. This issue affects Hitach...Show more
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information. This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00 Show less
CVE-2022-3499
1Tenable
1Nessus
Jun 17, 2026
Oct 31, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.
CVE-2022-3018
1Gitlab
1Gitlab
Jun 17, 2026
Oct 28, 2022
N/A· v4
4.9 MEDIUM· v3
N/A· v2
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a projec...Show more
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.Show less
CVE-2022-31239
1Dell
1Emc Powerscale Onefs
Jun 17, 2026
Oct 21, 2022
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to...Show more
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to disclosure of this sensitive data.Show less
CVE-2022-31684
2Broadcom
Pivotal
2Reactor Netty
Reactor Netty
Sep 4, 2026
Oct 19, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affe...Show more
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.Show less
CVE-2022-3293
1Gitlab
1Gitlab
Jun 17, 2026
Oct 17, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1
CVE-2022-39876
1Samsung
1Reminder
Jun 17, 2026
Oct 7, 2022
N/A· v4
3.3 LOW· v3
N/A· v2
Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.
CVE-2022-39874
1Samsung
1Account
Jun 17, 2026
Oct 7, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-23716
1Elastic
1Elastic Cloud Enterprise
Jun 17, 2026
Sep 28, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.