CVE-2021-44234: Insertion of Sensitive Information into Log File

SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information...

CVE-2021-39032: Insertion of Sensitive Information into Log File

IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962...

CVE-2021-45449: Insertion of Sensitive Information into Log File

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in the operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-21916

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21916

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21916 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-21897 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-21897 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

in log4js-node/log4js-node

BUG ======== any unprivileged user can see log file and sensitive information disclosed SUMMURY ============ log4js create log file to store the log . Log may contain many sentsitive information like username,password,token,api-key etc .\ So, this log file should not accessed by other user .\ But...

Improper Privilege Management in delgan/loguru

BUG ======== unprivileged user can see log file and sensitive information disclosed SUMMURY ============ loguru create log file to store the log . Log may contain many sentsitive information like username,password,token,key etc .\ So, this log file should not accessed by other user .\ But when...

Microsoft Windows Common Log File System Driver buffer error vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A buff...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21897)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21916)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver buffer error vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A buff...