Skip to content
OpenAdvisories

Weakness (CWE)

CWE-532: Insertion of Sensitive Information into Log File

Base Incomplete

The product writes sensitive information to a log file.

How to prevent it (4 mitigations)

  1. Architecture and Design, Implementation

    Consider seriously the sensitivity of the information written into log files. Do not write secrets into the log files.

  2. Distribution

    Remove debug log files before deploying the application into production.

  3. Operation

    Protect log files against unauthorized read/write.

  4. Implementation

    Adjust configurations appropriately when software is transitioned from a debug state to production.

Source: MITRE CWE-532

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-85260 Public exploit

    Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default

    Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-mllp component carries a logPhi option that governs whether HL7 payl…

    Apache Software Foundation Apache Camel
  • Medium 5.2
    CVE-2025-5781 Public exploit

    Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

    Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00…

    Hitachi Hitachi Device Manager Hitachi Configuration Manager Hitachi Ops Center API Configuration Manager
  • Medium 5.5
    CVE-2025-43426 Public exploit

    A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Taho…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.5
    CVE-2022-25477 Public exploit

    Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer dri…