Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2018-10-23 CVE-2018-17447 Information Exposure Through Log Files vulnerability in Citrix Netscaler Sd-Wan and Sd-Wan
An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
network
low complexity
citrix CWE-532
7.5
2018-10-05 CVE-2018-15763 Information Exposure Through Log Files vulnerability in Pivotal Software Pivotal Container Service
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs.
network
low complexity
pivotal-software CWE-532
8.8
2018-10-05 CVE-2018-1264 Information Exposure Through Log Files vulnerability in Pivotal Software Cloud Foundry LOG Cache 0.1/1.0.0
Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report.
network
low complexity
pivotal-software CWE-532
critical
9.8
2018-10-04 CVE-2018-0504 Information Exposure Through Log Files vulnerability in multiple products
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
network
low complexity
mediawiki debian CWE-532
6.5
2018-10-03 CVE-2018-16049 Information Exposure Through Log Files vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2.
network
low complexity
gitlab CWE-532
critical
9.8
2018-09-26 CVE-2018-1768 Information Exposure Through Log Files vulnerability in IBM Spectrum Protect Plus 10.1.0/10.1.1
IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file.
local
low complexity
ibm CWE-532
7.8
2018-09-19 CVE-2018-3828 Information Exposure Through Log Files vulnerability in Elastic Cloud Enterprise
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability.
network
high complexity
elastic CWE-532
7.5
2018-09-19 CVE-2018-3827 Information Exposure Through Log Files vulnerability in Elastic Azure Repository
A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin.
network
high complexity
elastic CWE-532
8.1
2018-09-17 CVE-2018-1223 Information Exposure Through Log Files vulnerability in Pivotal Cloud Foundry Container Runtime
Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs.
network
low complexity
pivotal CWE-532
8.8
2018-09-17 CVE-2018-1198 Information Exposure Through Log Files vulnerability in Pivotal Software Pivotal Cloud Cache
Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs.
network
low complexity
pivotal-software CWE-532
8.8