4562 matches found
Wildfly logs plaintext passwords
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file...
EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2022-1058)
According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to...
CVE-2022-0021
An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions...
CVE-2022-0021
Palo Alto Networks GlobalProtect App for Windows is affected by CVE-2022-0021. The vulnerability arises from an information exposure in the log files where cleartext credentials of the connected GlobalProtect user are logged during authentication via Connect Before Logon. Affected product/version...
The vulnerability of the Windows Common Log File System, a system for journaling on Windows operating systems, allows attackers to escalate their privileges.
The vulnerability of the Windows Common Log File System in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
GHSA-J667-C2HM-F2WP Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...
CVE-2022-22710
Windows Common Log File System Driver Denial of Service Vulnerability...
CVE-2022-22710
Windows Common Log File System Driver Denial of Service Vulnerability...
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-21998
Windows Common Log File System Driver Information Disclosure Vulnerability...
CVE-2022-21998
Windows Common Log File System Driver Information Disclosure Vulnerability...
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-21998
Windows Common Log File System Driver Information Disclosure Vulnerability...
CVE-2022-21981
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-21981
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-21981
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Information disclosure
Windows Common Log File System Driver Information Disclosure Vulnerability...