CWE-532 通过日志文件的信息暴露 类弱点 770 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-532指将敏感信息写入日志文件的漏洞，属于信息泄露类安全风险。攻击者常通过读取服务器日志或访问日志存储位置，窃取密码、密钥或个人隐私数据，进而实施身份冒充或横向移动。开发者应避免在日志中记录明文凭证、会话令牌或敏感业务数据，采用数据脱敏、加密存储及严格的日志访问控制机制，确保仅记录必要的非敏感审计信息，从而降低数据泄露风险。
logger.info("Username: " + usernme + ", CCN: " + ccn);locationClient = new LocationClient(this, this, this); locationClient.connect(); currentUser.setLocation(locationClient.getLastLocation()); ... catch (Exception e) { AlertDialog.Builder builder = new AlertDialog.Builder(this); builder.setMessage("Sorry, this application has experienced an error."); AlertDialog alert = builder.create(); alert.show(); Log.e("ExampleActivity", "Caught exception: " + e + " While on User:" + User.toString()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-43936 | Broadcom SANnav 日志信息泄露漏洞 — SANnav | 6.8 | Medium | 2024-11-21 |
| CVE-2022-43935 | Broadcom SANnav 日志信息泄露漏洞 — SANnav | 5.3 | Medium | 2024-11-21 |
| CVE-2024-11193 | YugabyteDB 安全漏洞 — YugabyteDB Anywhere | 7.8AI | High AI | 2024-11-13 |
| CVE-2024-11165 | YugabyteDB 安全漏洞 — YugabyteDB Anywhere | 4.9AI | Medium AI | 2024-11-13 |
| CVE-2024-52009 | Atlantis 日志信息泄露漏洞 — atlantis | 8.8 | - | 2024-11-08 |
| CVE-2024-51752 | AuthKit Next.js Library 日志信息泄露漏洞 — authkit-nextjs | 5.3AI | Medium AI | 2024-11-05 |
| CVE-2024-51753 | AuthKit Remix Library 日志信息泄露漏洞 — authkit-remix | 5.3AI | Medium AI | 2024-11-05 |
| CVE-2024-51528 | Huawei HarmonyOS和Huawei EMUI 安全漏洞 — HarmonyOS | 4.0 | Medium | 2024-11-05 |
| CVE-2024-10544 | WordPress plugin Woo Manage Fraud Orders 日志信息泄露漏洞 — Woo Manage Fraud Orders | 5.3 | Medium | 2024-10-31 |
| CVE-2024-49750 | Snowflake Connector for Python 日志信息泄露漏洞 — snowflake-connector-python | 5.5 | Medium | 2024-10-24 |
| CVE-2023-22649 | Rancher 日志信息泄露漏洞 — rancher | 8.4 | High | 2024-10-16 |
| CVE-2024-38862 | Checkmk 安全漏洞 — Checkmk | 4.9AI | Medium AI | 2024-10-14 |
| CVE-2024-8264 | Fortra Robot Schedule Enterprise Agent 安全漏洞 — Robot Schedule Enterprise | 5.5 | Medium | 2024-10-09 |
| CVE-2024-9466 | Palo Alto Networks Expedition 安全漏洞 — Expedition | 8.1AI | High AI | 2024-10-09 |
| CVE-2024-47822 | Directus 日志信息泄露漏洞 — directus | 4.2 | Medium | 2024-10-08 |
| CVE-2024-9621 | Quarkus CXF 日志信息泄露漏洞 | 5.3 | Medium | 2024-10-08 |
| CVE-2024-8609 | ValeApp 安全漏洞 — ValeApp | 7.5AI | High AI | 2024-09-27 |
| CVE-2023-46175 | IBM Cloud Pak for Multicloud Management 安全漏洞 — Cloud Pak for Multicloud Management | 4.4 | Medium | 2024-09-26 |
| CVE-2022-49037 | Synology Drive 日志信息泄露漏洞 — Synology Drive Client | 6.5 | Medium | 2024-09-26 |
| CVE-2024-7421 | Devolutions Remote Desktop Manager 安全漏洞 — Remote Desktop Manager | 7.1AI | High AI | 2024-09-25 |
| CVE-2024-43990 | WordPress plugin Masterstudy LMS Starter 日志信息泄露漏洞 — Masterstudy LMS Starter | 5.3 | Medium | 2024-09-25 |
| CVE-2024-8775 | Red Hat Ansible 日志信息泄露漏洞 | 5.5 | Medium | 2024-09-14 |
| CVE-2024-4472 | GitLab 安全漏洞 — GitLab | 4.0 | Medium | 2024-09-12 |
| CVE-2021-22518 | OpenText Identity Manager AzureAD Driver 安全漏洞 — Identity Manager AzureAD Driver | 5.8 | Medium | 2024-09-12 |
| CVE-2021-22533 | OpenText eDirectory 安全漏洞 — eDirectory | 6.5 | Medium | 2024-09-12 |
| CVE-2022-26322 | OpenText Identity Manager REST Driver 安全漏洞 — Identity Manager REST Driver 1.1.2.0200 | 4.9 | Medium | 2024-09-12 |
| CVE-2024-43781 | Siemens SINUMERIK 日志信息泄露漏洞 — SINUMERIK 828D V4 | 5.5 | Medium | 2024-09-10 |
| CVE-2024-42344 | Siemens SINEMA Remote Connect 日志信息泄露漏洞 — SINEMA Remote Connect Client | 4.4 | Medium | 2024-09-10 |
| CVE-2024-20440 | Cisco Smart Licensing Utility 安全漏洞 — Cisco Smart License Utility | 7.5 | High | 2024-09-04 |
| CVE-2024-8365 | HashiCorp Vault Community Edition和HashiCorp Vault Enterprise 安全漏洞 — Vault | 6.2 | Medium | 2024-09-02 |
CWE-532（通过日志文件的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 770 条 CVE 漏洞。