PT-2023-23793 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 2303 9.4.1141 Description: The issue allows an unauthenticated malicious user with local access to the device to read sensitive information written to the log files. Recommendations: For Dell Wyse ThinOS...

PT-2023-20434 · Ibm · Planning Analytics Cartridge For Cloud Pak For Data

Name of the Vulnerable Software and Affected Versions: Planning Analytics Cartridge for Cloud Pak for Data version 4.0 Description: The issue exposes sensitive information in logs, which could lead an attacker to exploit it and conduct further attacks. Recommendations: For Planning Analytics...

CVE-2023-26023: Insertion of Sensitive Information into Log File

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896...

PT-2023-25843 · Unknown · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Description: The issue allows an authenticated attacker to obtain sensitive information via the log files. Recommendations: For versions prior to 6.12.0.6, update to version 6.12.0.6 or later. For versio...

JetBrains TeamCity log information leakage vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

CVE-2023-38064: Insertion of Sensitive Information into Log File

In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log...

CVE-2023-35299

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-35299

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

PT-2023-3823 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system...

CVE-2023-35299: Out-of-bounds Read

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2023-35695

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security Enterprise 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product...

CVE-2023-35695

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security Enterprise 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product...

CVE-2023-35695

CVE-2023-35695 affects Trend Micro Mobile Security (Enterprise) 9.8 SP5. A remote attacker could download a log file from the product, potentially exposing sensitive information about the software. The root cause details are not expressly provided in the linked documents, but the vulnerability is...

CVE-2023-35695: Insertion of Sensitive Information into Log File

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security Enterprise 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product...

CVE-2022-4149 Local privilege escalation using log file

The Netskope client service prior to R96 on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory C:\Users\Public\netSkope for a standard user. The files are created and written with a SYSTEM account except one file logplaceholder which inherits permission giving all...

CVE-2022-4149 Local privilege escalation using log file

The Netskope client service prior to R96 on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory C:\Users\Public\netSkope for a standard user. The files are created and written with a SYSTEM account except one file logplaceholder which inherits permission giving all...

CVE-2022-4149

CVE-2022-4149 affects Netskope client service on Windows older than R96. The service runs as SYSTEM and writes logs to C:\Users\Public\netSkope; a race condition during restart allows a local unprivileged user to create a logplaceholder file and set permissive ACLs. Once created with proper ACLs,...

SUSE CVE-2023-31437

An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."...