Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2020-12-07 CVE-2020-8563 Information Exposure Through Log Files vulnerability in Kubernetes
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log.
local
low complexity
kubernetes CWE-532
2.1
2020-11-30 CVE-2020-4900 Information Exposure Through Log Files vulnerability in IBM Business Automation Workflow 19.0.0.3
IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user.
local
low complexity
ibm CWE-532
2.1
2020-11-24 CVE-2020-25640 Information Exposure Through Log Files vulnerability in Redhat Wildfly
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
network
high complexity
redhat CWE-532
5.3
2020-11-24 CVE-2020-10763 Information Exposure Through Log Files vulnerability in multiple products
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information.
local
low complexity
heketi-project redhat CWE-532
2.1
2020-11-24 CVE-2020-10762 Information Exposure Through Log Files vulnerability in Redhat Gluster-Block
An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations.
local
low complexity
redhat CWE-532
5.5
2020-11-16 CVE-2020-4671 Information Exposure Through Log Files vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user.
network
low complexity
ibm CWE-532
4.0
2020-11-12 CVE-2020-2048 Information Exposure Through Log Files vulnerability in Paloaltonetworks Pan-Os
An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo Alto Networks PAN-OS software.
local
low complexity
paloaltonetworks CWE-532
2.1
2020-10-15 CVE-2020-11643 Information Exposure Through Log Files vulnerability in Br-Automation products
An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains.
network
low complexity
br-automation CWE-532
4.0
2020-10-08 CVE-2020-5389 Information Exposure Through Log Files vulnerability in Dell EMC Openmanage Integration FOR Microsoft System Center
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability.
network
low complexity
dell CWE-532
4.0
2020-10-06 CVE-2020-26605 Information Exposure Through Log Files vulnerability in Google Android 10.0/11.0
An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software.
network
low complexity
google CWE-532
5.0