This vulnerability, classified as CWE-532, occurs in the affiliate-toolkit product by SERVIT Software Solutions. It allows sensitive information to be written into log files, potentially leading to unintended disclosure of confidential data. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector with low complexity and no privileges or user interaction required, but only limited confidentiality impact. The issue affects versions up to 3.4.4. No patch or official fix has been documented yet.

The impact is limited to confidentiality, as sensitive information may be exposed through log files. There is no impact on integrity or availability. Exploitation could allow an attacker to gain access to sensitive data if they can read the logs. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to log files to authorized personnel only and consider reviewing logging configurations to avoid logging sensitive information where possible.