Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2019-08-08 CVE-2019-1953 Information Exposure Through Log Files vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text.
network
low complexity
cisco CWE-532
6.5
2019-08-07 CVE-2019-10370 Information Exposure Through Log Files vulnerability in Jenkins Mask Passwords
Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.
network
low complexity
jenkins CWE-532
6.5
2019-08-07 CVE-2019-10367 Information Exposure Through Log Files vulnerability in Jenkins Configuration AS Code
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.
local
low complexity
jenkins CWE-532
5.5
2019-08-05 CVE-2019-4284 Information Exposure Through Log Files vulnerability in IBM Cloud Private
IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user.
local
low complexity
ibm CWE-532
4.4
2019-08-02 CVE-2017-18426 Information Exposure Through Log Files vulnerability in Cpanel
cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).
network
low complexity
cpanel CWE-532
2.7
2019-08-02 CVE-2017-18423 Information Exposure Through Log Files vulnerability in Cpanel
In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).
local
low complexity
cpanel CWE-532
3.3
2019-08-02 CVE-2017-18412 Information Exposure Through Log Files vulnerability in Cpanel
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).
local
high complexity
cpanel CWE-532
2.5
2019-08-01 CVE-2016-10819 Information Exposure Through Log Files vulnerability in Cpanel
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).
network
low complexity
cpanel CWE-532
6.5
2019-07-31 CVE-2019-10364 Information Exposure Through Log Files vulnerability in Jenkins EC2
Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.
local
low complexity
jenkins CWE-532
5.5
2019-07-31 CVE-2019-10358 Information Exposure Through Log Files vulnerability in Jenkins Maven
Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.
network
low complexity
jenkins CWE-532
6.5