CWE-532

In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication,

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credential

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, w

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 cont

Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote use

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being writt

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whic

RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logg

RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password m

A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints s

A password management issue exists where the Organization authentication username and password were stored in plaintext

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the cr

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials w

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were l

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disc

Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes creden

An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql

aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File w

Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of c

ProjectSend before r1070 writes user passwords to the server logs.

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Eng

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In

BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerabl

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the

In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can i

The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.

Moodle before 2.2.2 has users' private files included in course backups

Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query pa

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing a

An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the appl

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 L

In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access token

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwo

In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain

Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially reveal

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).

Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the co

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated,

OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.

An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices

In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certa

In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain l

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9

On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when r