Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

CVEs (1,312)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25829 1Samsung 1Watch Active2 Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25828 1Samsung 1Watch Active Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25827 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25826 1Samsung 1Galaxy Watch 3 Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25823 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.
CVE-2022-0725 2Fedoraproject Keepass 3Extra Packages For Enterprise Linux FedoraKeepass Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive...Show more A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.Show less
CVE-2021-41543 1Siemens 1Climatix Pol909 Firmware Jun 17, 2026 Mar 8, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices cont...Show more A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.Show less
CVE-2021-25009 1Correosexpress Project 1Correosexpress Jun 17, 2026 Mar 7, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
CVE-2022-25374 1Hashicorp 1Terraform Enterprise Jun 17, 2026 Feb 25, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP requests in a manner that may capture sensitive data. Fixed in v202202-1.
CVE-2022-20630 1Cisco 1Catalyst Center Jun 17, 2026 Feb 10, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information o...Show more A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.Show less
CVE-2022-0021 1Paloaltonetworks 1Globalprotect Jun 17, 2026 Feb 10, 2022 N/A· v4 5.5 MEDIUM· v3 1.9 LOW· v2 An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Conn...Show more An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.Show less
CVE-2022-22939 1Vmware 1Cloud Foundation Jun 17, 2026 Feb 4, 2022 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Found...Show more VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or more log files.Show less
CVE-2021-36289 1Dell 1Emc Unity Operating Environment Jun 17, 2026 Jan 25, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.
CVE-2022-0338 1Loguru Project 1Loguru Jun 17, 2026 Jan 25, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.
CVE-2021-41808 1M Files 1M Files Server Jun 17, 2026 Jan 18, 2022 N/A· v4 2.3 LOW· v3 1.9 LOW· v2 In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.
CVE-2022-22703 1Stormshield 1Network Security Jun 17, 2026 Jan 17, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer.
CVE-2021-44234 1Sap 1Business One Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
CVE-2021-39032 1Ibm 1Sterling Gentran Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962.
CVE-2021-45449 1Docker 1Docker Desktop Jun 17, 2026 Jan 12, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and th...Show more Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.Show less
CVE-2021-45034 1Siemens 4Cp 8000 Master Module With I/o 25/+70 Firmware Cp 8000 Master Module With I/o 40/+70 FirmwareCp 8021 Master Module Firmware+1 more Jun 17, 2026 Jan 11, 2022 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP...Show more A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). The web server of the affected system allows access to logfiles and diagnostic data generated by a privileged user. An unauthenticated attacker could access the files by knowing the corresponding download links.Show less

Previous 1...454647...66 Next