Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2023-06-16 CVE-2023-20885 Information Exposure Through Log Files vulnerability in Pivotal products
Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All versions prior to 63; SMB-volume release: All versions prior to 3.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions prior to 7.1.19.
network
low complexity
pivotal CWE-532
6.5
2023-06-13 CVE-2023-26207 Information Exposure Through Log Files vulnerability in Fortinet Fortios and Fortiproxy
An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10.
network
low complexity
fortinet CWE-532
6.5
2023-06-07 CVE-2023-2878 Information Exposure Through Log Files vulnerability in Kubernetes Secrets-Store-Csi-Driver
Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.
local
low complexity
kubernetes CWE-532
5.5
2023-06-05 CVE-2023-34097 Information Exposure Through Log Files vulnerability in Hoppscotch
hoppscotch is an open source API development ecosystem.
network
low complexity
hoppscotch CWE-532
8.8
2023-05-31 CVE-2023-34223 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
network
low complexity
jetbrains CWE-532
5.3
2023-05-31 CVE-2023-28351 Information Exposure Through Log Files vulnerability in Faronics Insight 10.0.19045
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
local
low complexity
faronics CWE-532
3.3
2023-05-22 CVE-2022-0010 Information Exposure Through Log Files vulnerability in ABB products
Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account.
local
low complexity
abb CWE-532
5.5
2023-05-16 CVE-2023-33001 Information Exposure Through Log Files vulnerability in Jenkins Hashicorp Vault
Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
network
low complexity
jenkins CWE-532
7.5
2023-05-12 CVE-2023-2514 Information Exposure Through Log Files vulnerability in Mattermost
Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization. 
network
low complexity
mattermost CWE-532
7.5
2023-05-10 CVE-2023-22447 Information Exposure Through Log Files vulnerability in Intel Open Cache Acceleration Software
Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-532
4.4