CWE-532 通过日志文件的信息暴露 类弱点 702 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-532指将敏感信息写入日志文件的漏洞，属于信息泄露类安全风险。攻击者常通过读取服务器日志或访问日志存储位置，窃取密码、密钥或个人隐私数据，进而实施身份冒充或横向移动。开发者应避免在日志中记录明文凭证、会话令牌或敏感业务数据，采用数据脱敏、加密存储及严格的日志访问控制机制，确保仅记录必要的非敏感审计信息，从而降低数据泄露风险。
logger.info("Username: " + usernme + ", CCN: " + ccn);locationClient = new LocationClient(this, this, this); locationClient.connect(); currentUser.setLocation(locationClient.getLastLocation()); ... catch (Exception e) { AlertDialog.Builder builder = new AlertDialog.Builder(this); builder.setMessage("Sorry, this application has experienced an error."); AlertDialog alert = builder.create(); alert.show(); Log.e("ExampleActivity", "Caught exception: " + e + " While on User:" + User.toString()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-88883 | Renovate 44.14.4 之前 TLS 密钥泄露 — renovate | 7.7 | High | 2026-09-10 |
| CVE-2026-79966 | CWE-532：敏感信息写入日志文件漏洞 — Secure Connect Gateway 5.0 - Application | 3.3 | Low | 2026-09-09 |
| CVE-2026-80169 | Dell SCG 5.0 5.36前日志泄露敏感信息 — Secure Connect Gateway 5.0 - Application | 3.3 | Low | 2026-09-09 |
| CVE-2025-46808 | NeuVector 容器日志敏感信息泄露 — neuvector | 6.8 | Medium | 2026-09-09 |
| CVE-2026-80124 | Dell SCG 5.0 日志敏感信息泄露 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-09 |
| CVE-2026-78631 | Okta Hyperdrive Agent 敏感信息限制不当漏洞 — Okta Hyperdrive Agent | 5.3 | Medium | 2026-09-08 |
| CVE-2026-78627 | Okta Hyperdrive安装器凭据保护不当漏洞 — Okta Hyperdrive Integration Plugin | 7.3 | High | 2026-09-08 |
| CVE-2026-68873 | Windows 程序兼容性助手服务信息泄露 — Windows 11 version 23H2 | 5.5 | Medium | 2026-09-08 |
| CVE-2026-86597 | Snowflake 驱动日志敏感信息泄露漏洞 — Snowflake Connector for Python | 6.5 | Medium | 2026-09-08 |
| CVE-2026-86501 | JetBrains IntelliJ IDEA 日志信息泄露漏洞 — IntelliJ IDEA | 2.8 | Low | 2026-09-07 |
| CVE-2026-80056 | Dell Secure Connect Gateway 日志信息泄露漏洞 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-07 |
| CVE-2026-16689 | IBM App Connect Enterprise 日志信息泄露漏洞 — App Connect Enterprise | 6.2 | Medium | 2026-09-04 |
| CVE-2026-17442 | IBM App Connect Enterprise 日志信息泄露漏洞 — App Connect Enterprise | 5.1 | Medium | 2026-09-04 |
| CVE-2026-19649 | IBM App Connect Enterprise 日志信息泄露漏洞 — App Connect Enterprise | 6.2 | Medium | 2026-09-04 |
| CVE-2026-85174 | SiYuan 日志信息泄露漏洞 — siyuan | 8.8 | High | 2026-09-03 |
| CVE-2026-85171 | n8n 日志信息泄露漏洞 — n8n | 7.1 | High | 2026-09-03 |
| CVE-2026-55221 | malach-it boruta-server 日志信息泄露漏洞 — boruta-server | 6.5 | Medium | 2026-09-02 |
| CVE-2026-81530 | MongoDB C# Driver 日志信息泄露漏洞 — C# Driver | 5.6 | Medium | 2026-08-27 |
| CVE-2026-75573 | MongoDB BI Connector 日志信息泄露漏洞 — BI Connector | 4.4 | Medium | 2026-08-27 |
| CVE-2026-81715 | Tobi OpenSSL Encrypt 日志信息泄露漏洞 — openssl_encrypt | 3.3 | Low | 2026-08-27 |
| CVE-2026-81705 | Tobi OpenSSL Encrypt 日志信息泄露漏洞 — openssl_encrypt | 7.5 | High | 2026-08-27 |
| CVE-2026-21808 | HCL BigFix Quantum Risk Analyzer 日志信息泄露漏洞 — BigFix Quantum Risk Analyzer | 4.1 | Medium | 2026-08-26 |
| CVE-2026-58070 | Veeam Backup and Replication 日志信息泄露漏洞 — Backup and Replication | 6.8 | Medium | 2026-08-26 |
| CVE-2026-14948 | Frauscher Sensortechnik FDS102 日志信息泄露漏洞 — FDS 102 | 8.8 | High | 2026-08-20 |
| CVE-2026-76375 | Splunk SOAR 日志信息泄露漏洞 — AD LDAP app for Splunk SOAR | 5.0 | Medium | 2026-08-19 |
| CVE-2026-76374 | Splunk SOAR 日志信息泄露漏洞 — AD LDAP app for Splunk SOAR | 4.3 | Medium | 2026-08-19 |
| CVE-2020-37267 | Renovate Bot Renovate 日志信息泄露漏洞 — renovate | 7.5 | High | 2026-08-19 |
| CVE-2019-25766 | Renovate Bot Renovate 日志信息泄露漏洞 — renovate | 7.5 | High | 2026-08-19 |
| CVE-2026-66780 | Submariner Operator 权限许可和访问控制问题漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2.17 | 6.5 | Medium | 2026-08-18 |
| CVE-2026-75485 | OpenShift must-gather 日志信息泄露漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2.11 | 5.5 | Medium | 2026-08-18 |
CWE-532（通过日志文件的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 702 条 CVE 漏洞。