CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Design/Logic Flaw

An insertion of sensitive information into log file vulnerability CWE-532 in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, versi...

CVE-2023-45585

FortiSIEM contains a log file vulnerability (CWE-532) affecting multiple versions (7.0.0; 6.7.6 and below; 6.6.3 and below; 6.5.1 and below; 6.4.2 and below; 6.3.3 and below; 6.2.1 and below; 6.1.2 and below; 5.4.0; 5.3.3 and below) where an authenticated user could view an encrypted ElasticSearc...

CVE-2023-45585

An insertion of sensitive information into log file vulnerability CWE-532 in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, versi...

CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-36424

CVE-2023-36424 is documented as a Windows kernel-level out-of-bounds read vulnerability in the Common Log File System Driver (clfs.sys) that enables privilege escalation. Connected sources describe a pool overflow/record-validation flaw in clfs.sys (Windows Kernel pool management) exploited via c...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Liquidweb Restrict_Content

CVE-2023-47668 Restrict Content = 3.2.7 - Information Expo...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver Security Vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Intel® On Demand Agent Software Advisory

Summary: A potential security vulnerability in some Intel® On Demand agent software may allow information disclosure . Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32283 Description: Insertion of sensitive information into lo...

CVE-2022-46647: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-36424: Out-of-bounds Read

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-32283: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in some IntelR On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-23699 · Intel · Intel On Demand

Name of the Vulnerable Software and Affected Versions: IntelR On Demand software versions prior to 1.16.2 IntelR On Demand software versions prior to 2.1.1 IntelR On Demand software versions prior to 3.1.0 Description: The issue involves the insertion of sensitive information into a log file in...

PT-2023-30488

Name of the Vulnerable Software and Affected Versions ThemeIsle Cloud Templates & Patterns collection versions 1.2.2 and earlier Description The issue is related to the exposure of sensitive information to an unauthorized actor. This is due to a sensitive information exposure via log file...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Themeisle Cloud_Templates_\&_Patterns_Collection

CVE-2023-47529 Cloud Templates & Patterns collection =...

Insertion Of Sensitive Information Into Log File

github.com/juanfont/headscale is vulnerable to Insertion Of Sensitive Information Into Log File. The vulnerability is due the HTTP api writting the whole bearer token to info-level logs...

CVE-2023-47390: Insertion of Sensitive Information into Log File

Headscale through 0.22.3 writes bearer tokens to info-level logs...

cloud-init security, bug fix, and enhancement update

23.1.1-11.0.2 - Fix Oracle Datasource network and getdata methods for OCI OL Orabug: 35950168 23.1.1-11.0.1 - Increase retry value and add timeout for OCI Orabug: 35329883 - Fix log file permission Orabug: 35302969 - Update detection logic for OL distros in config template Orabug: 34845400 - Adde...