3734 matches found
PT-2014-7066
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.2.x through 5.2.4 Description The issue allows local users to obtain sensitive information by reading log files due to improper processing of the logging configuration when the Connect:Direct Server Adapt...
CVE-2014-6146: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files...
CVE-2014-5038
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...
Information disclosure
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...
CVE-2014-5038
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...
CVE-2014-5038
CVE-2014-5038 affects Eucalyptus 3.0.0–4.0.1. When the log level is DEBUG or lower, user and system passwords are logged in cloud log files, enabling local users to obtain sensitive information. Sources include NVD entries and Ubuntu/CVE records; the material does not provide a remediation detail...
CVE-2014-7988
The Unified Messaging Service UMS in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493...
Code injection
The Unified Messaging Service UMS in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493...
CVE-2014-7988
The Unified Messaging Service UMS in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493...
PT-2014-6263
Name of the Vulnerable Software and Affected Versions Eucalyptus versions 3.0.0 through 4.0.1 Description The issue allows local users to obtain sensitive information, including user and system passwords, by reading the cloud log files when the log level is set to DEBUG or lower. Recommendations...
PT-2014-8360
Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions 10.5 and earlier Description The issue allows remote authenticated users to obtain sensitive information by reading log files. Recommendations For Cisco Unity Connection versions 10.5 and earlier, update to a...
CVE-2014-5038: Exposure of Sensitive Information to an Unauthorized Actor
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...
CVE-2014-7988: Exposure of Sensitive Information to an Unauthorized Actor
The Unified Messaging Service UMS in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493...
Trove: potential leak of passwords into log files
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...
Trove: potential leak of passwords into log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
Trove: potential leak of passwords into log files
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...
Trove: potential leak of passwords into log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
CVE-2014-0136
The 1 get and 2 log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine CFME 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors...
Code injection
The 1 get and 2 log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine CFME 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors...