Threats Tagged 'cwe-532'

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensitive information, such as user credentials or other confidential data, that was inadvertently logged due to misconfiguration, potentially leading to unauthorized access.

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.  Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs.  This only affects applications using the default login portlet.

ANDRITZ HIPASE-250 contains an unauthenticated HTTP endpoint that allows remote attackers to change the server's logging level and target. This vulnerability can be exploited to suppress audit logging, potentially hiding malicious activity. No authentication is required to access this critical function. The vulnerability has a medium severity score of 5.3 and does not impact confidentiality or availability but affects integrity by allowing log tampering. No patch or official remediation information is currently available.

CVE-2026-12947 is a vulnerability in IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27 where sensitive information may be stored in log files accessible to local users. This could lead to unauthorized disclosure of sensitive data. The vulnerability has a high severity with a CVSS score of 7.5. No official patch or remediation guidance is currently provided by the vendor.

CVE-2026-44105 is a vulnerability in Phoenix Contact CHARX SEC-3150 version 1.0.0 where credentials for the local user "user-app" are written to log files. This exposure could allow a low-privileged local attacker with access to these logs to authenticate via SSH as the limited user "user-app", potentially disrupting charging operations.

CVE-2026-59326 is a low-severity vulnerability in Spring Tools for Eclipse (version 5.2.0 and earlier) where the Spring Boot language server logs the raw value of proxy environment variables, including embedded Basic-auth credentials, at INFO level without redaction. This can lead to unintended disclosure of proxy credentials through log files, which may be accessible to other local users or attached to bug reports.

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.2.0_1 store potentially sensitive information in log files. This information could be accessed by users with privileged access to the system. The vulnerability is classified as CWE-532, indicating insertion of sensitive information into log files. The CVSS 3.1 base score is 4.9, reflecting a medium severity level with high confidentiality impact but no impact on integrity or availability.

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.

CVE-2026-14528 is a high-severity vulnerability in IBM WebSphere Application Server versions 8.5 and 9.0. It involves the insertion of sensitive information into log files, which could allow a remote attacker to obtain this sensitive data. The vulnerability is classified under CWE-532. No official patch or remediation guidance has been provided yet by IBM.

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 stores potentially sensitive information in log files that could be read by a privileged user.