Weakness (CWE)

CWE-532: Insertion of Sensitive Information into Log File

Base Incomplete

The product writes sensitive information to a log file.

How to prevent it (4 mitigations)

Architecture and Design, Implementation

Consider seriously the sensitivity of the information written into log files. Do not write secrets into the log files.
Distribution

Remove debug log files before deploying the application into production.
Operation

Protect log files against unauthorized read/write.
Implementation

Adjust configurations appropriately when software is transitioned from a debug state to production.

Source: MITRE CWE-532

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.6

CVE-2025-24984 Exploited

Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 11, 2025
KEV Mar 11, 2025
Medium 4.4

CVE-2023-21492 Exploited

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypas…

Samsung Mobile Samsung Mobile Devices

May 4, 2023
KEV May 19, 2023