Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2021-06-11 CVE-2021-25422 Information Exposure Through Log Files vulnerability in Samsung Watch Active Plugin
Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
local
low complexity
samsung CWE-532
5.5
2021-06-11 CVE-2021-25423 Information Exposure Through Log Files vulnerability in Samsung Watch Active2 Plugin
Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.
local
low complexity
samsung CWE-532
5.5
2021-06-10 CVE-2021-3039 Information Exposure Through Log Files vulnerability in Paloaltonetworks Prisma Cloud
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file.
network
low complexity
paloaltonetworks CWE-532
3.8
2021-06-09 CVE-2020-15380 Information Exposure Through Log Files vulnerability in Broadcom Sannav 2.1.0
Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.
network
low complexity
broadcom CWE-532
7.5
2021-06-08 CVE-2021-22219 Information Exposure Through Log Files vulnerability in Gitlab
All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 allow a high privilege user to obtain sensitive information from log files because the sensitive information was not correctly registered for log masking.
network
low complexity
gitlab CWE-532
4.9
2021-06-08 CVE-2021-21558 Information Exposure Through Log Files vulnerability in Dell EMC Networker
Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability.
local
low complexity
dell CWE-532
4.4
2021-06-04 CVE-2021-22516 Information Exposure Through Log Files vulnerability in Microfocus Secure API Manager 2.0.0
Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0.
network
low complexity
microfocus CWE-532
7.5
2021-06-01 CVE-2021-3425 Information Exposure Through Log Files vulnerability in Redhat Jboss A-Mq 7
A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality.
local
low complexity
redhat CWE-532
4.4
2021-05-26 CVE-2021-20191 Information Exposure Through Log Files vulnerability in multiple products
A flaw was found in ansible.
local
low complexity
oracle redhat CWE-532
5.5
2021-05-26 CVE-2021-20178 Information Exposure Through Log Files vulnerability in multiple products
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module.
local
low complexity
redhat fedoraproject CWE-532
5.5