Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

CVEs (1,312)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-44862 1Netskope 1Netskope Jun 17, 2026 Nov 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive info...Show more Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user. Show less
CVE-2022-44624 1Jetbrains 1Teamcity Jun 17, 2026 Nov 3, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
CVE-2022-41553 1Hitachi 2Infrastructure Analytics Advisor Ops Center Analyzer Jun 17, 2026 Nov 1, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer pro...Show more Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer probe component) allows local users to gain sensitive information. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00. Show less
CVE-2022-3191 1Hitachi 1Ops Center Analyzer Jun 17, 2026 Nov 1, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information. This issue affects Hitach...Show more Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local users to gain sensitive information. This issue affects Hitachi Ops Center Analyzer: from 10.8.1-00 before 10.9.0-00 Show less
CVE-2022-3499 1Tenable 1Nessus Jun 17, 2026 Oct 31, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.
CVE-2022-3018 1Gitlab 1Gitlab Jun 17, 2026 Oct 28, 2022 N/A· v4 4.9 MEDIUM· v3 N/A· v2 An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a projec...Show more An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.Show less
CVE-2022-31239 1Dell 1Emc Powerscale Onefs Jun 17, 2026 Oct 21, 2022 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to...Show more Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to disclosure of this sensitive data.Show less
CVE-2022-31684 2Broadcom Pivotal 2Reactor Netty Reactor Netty Sep 4, 2026 Oct 19, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affe...Show more Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.Show less
CVE-2022-3293 1Gitlab 1Gitlab Jun 17, 2026 Oct 17, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1
CVE-2022-39876 1Samsung 1Reminder Jun 17, 2026 Oct 7, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.
CVE-2022-39874 1Samsung 1Account Jun 17, 2026 Oct 7, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-23716 1Elastic 1Elastic Cloud Enterprise Jun 17, 2026 Sep 28, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.
CVE-2022-32217 1Rocketchat 1Rocket.chat Jun 17, 2026 Sep 23, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.
CVE-2022-40979 1Jetbrains 1Teamcity Jun 17, 2026 Sep 23, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable
CVE-2022-39821 1Nokia 11350 Optical Management System Jun 17, 2026 Sep 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable fil...Show more In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.Show less
CVE-2022-36877 1Samsung 1Samsung Members Jun 17, 2026 Sep 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.
CVE-2022-34369 1Dell 1Emc Powerscale Onefs Jun 17, 2026 Sep 2, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability. A remote unprivileged attacker could potentia...Show more Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to exposure of this sensitive data.Show less
CVE-2022-28625 1Hp 1Oneview Jun 17, 2026 Aug 31, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive informatio...Show more A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.Show less
CVE-2022-39046 2Gnu Netapp 7Glibc H300s FirmwareH410c Firmware+4 more Jun 17, 2026 Aug 31, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log fil...Show more An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.Show less
CVE-2022-0718 3Debian OpenstackRedhat 4Debian Linux Openshift Container PlatformOpenstack Platform+1 more Jun 17, 2026 Aug 29, 2022 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Previous 1...414243...66 Next