Insertion of Sensitive Information into Log File

🗓️ 20 Apr 2026 15:31:52Reported by Snyk Security DatabaseType

Kafka clients leak sensitive data via toString logging of config and credential requests; upgrade to 3.9.2 or 4.0.1.

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-3.9.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-33558)	29 May 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)	27 Jul 202622:08	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	7 May 202612:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Kafka (CVE-2026-35554)	24 Jun 202621:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Aug 202614:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities	26 Aug 202621:13	–	ibm
ATTACKERKB	CVE-2026-33558	20 Apr 202613:20	–	attackerkb
BDU FSTEC	The vulnerability of the NetworkClient component of the Apache Kafka messaging broker allows a attacker to gain unauthorized access to confidential information.	31 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-33558 vulnerabilities	2 May 202607:17	–	cgr