Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2021-03-22 CVE-2021-22310 Information Exposure Through Log Files vulnerability in Huawei products
There is an information leakage vulnerability in some huawei products.
local
low complexity
huawei CWE-532
4.4
2021-03-15 CVE-2021-3167 Information Exposure Through Log Files vulnerability in Cloudera Data Engineering 1.3.0
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.
network
low complexity
cloudera CWE-532
6.5
2021-02-11 CVE-2021-25688 Information Exposure Through Log Files vulnerability in Teradici Pcoip Graphics Agent and Pcoip Standard Agent
Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21.01.0 may log parts of a user's password in the application logs.
local
low complexity
teradici CWE-532
5.5
2021-02-10 CVE-2021-22133 Information Exposure Through Log Files vulnerability in Elastic APM Agent
The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an application panic.
low complexity
elastic CWE-532
2.4
2021-02-10 CVE-2020-7021 Information Exposure Through Log Files vulnerability in Elastic Elasticsearch
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled.
network
low complexity
elastic CWE-532
4.9
2021-02-08 CVE-2021-20359 Information Exposure Through Log Files vulnerability in IBM Cloud PAK for Automation 20.0.2/20.0.3
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user.
network
low complexity
ibm CWE-532
6.5
2021-01-14 CVE-2021-21722 Information Exposure Through Log Files vulnerability in ZTE Zxv10 B860A Firmware V2.1Tv0032.1.1.04Jiangsutelecom
A ZTE Smart STB is impacted by an information leak vulnerability.
local
low complexity
zte CWE-532
4.4
2021-01-13 CVE-2021-1226 Information Exposure Through Log Files vulnerability in Cisco products
A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system.
network
low complexity
cisco CWE-532
6.5
2021-01-05 CVE-2020-26199 Information Exposure Through Log Files vulnerability in Dell products
Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability.
local
low complexity
dell CWE-532
6.7
2020-12-15 CVE-2020-0476 Information Exposure Through Log Files vulnerability in Google Android 11.0
In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs.
local
low complexity
google CWE-532
4.4