10955 matches found
kube-audit-rest's example logging configuration could disclose secret values in the audit log
If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages...
CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs
A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...
CVE-2025-0736: Insertion of Sensitive Information into Log File
A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...
PT-2025-2690
Name of the Vulnerable Software and Affected Versions glog affected versions not specified Description The issue arises when logs are written to a widely-writable directory, allowing an unprivileged attacker to predict a privileged process's log file path and create a symbolic link to a sensitive...
Red Hat Infinispan log information leakage vulnerability
Red Hat Infinispan is a distributed caching and key-value NoSQL data store software from Red Hat, Inc. A log information disclosure vulnerability exists in Red Hat Infinispan that stems from the use of JDBCPING, where sensitive information may be exposed through the logging mechanism, leading to...
CVE-2025-24169
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.3, Safari 18.3. A malicious app may be able to bypass browser extension authentication...
CVE-2025-24146
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging...
CVE-2024-54519
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information...
CVE-2024-54519
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to read sensitive location information...
CVE-2024-54519
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information...
CVE-2024-54519
CVE-2024-54519 affects macOS Find My in macOS Sonoma 14.7.2 and macOS Sequoia 15.2. The issue arises from logging, and an app may read sensitive location information. Apple’s entries confirm the fix is in Sonoma 14.7.2 and Sequoia 15.2 via sanitizing logging. Remediation is to update to the patch...
CVE-2025-24146
The Messages application in macOS is vulnerable to a privacy issue where deleting a conversation may expose user contact information within system logging. This occurs due to insufficient redaction of sensitive data. The vulnerability is addressed in macOS Sequoia 15.3 , macOS Sonoma 14.7.3 , and...
CVE-2025-24146
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging...
CVE-2025-24169
A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication...
CVE-2025-24169
A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication...
CVE-2025-0736
A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...
OTRS security vulnerabilities
OTRS is a service management solution from OTRS Germany. A security vulnerability exists in OTRS, which stems from the fact that certain bugs in the upstream libraries can insert sensitive information in the OTRS logging mechanism and send emails to the system administrator...
CVE-2025-24146: Exposure of Sensitive Information to an Unauthorized Actor
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging...
SUSE CVE-2025-24034
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Starting in version 0.7.0 and prior to versions 0.7.15 and 0.8.3, Himmelblau is vulnerable to leaking credentials in debug logs. When debug logging is enabled, user access tokens are inadvertently logged, potentially...
