CWE-532 通过日志文件的信息暴露 类弱点 770 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-532指将敏感信息写入日志文件的漏洞，属于信息泄露类安全风险。攻击者常通过读取服务器日志或访问日志存储位置，窃取密码、密钥或个人隐私数据，进而实施身份冒充或横向移动。开发者应避免在日志中记录明文凭证、会话令牌或敏感业务数据，采用数据脱敏、加密存储及严格的日志访问控制机制，确保仅记录必要的非敏感审计信息，从而降低数据泄露风险。
logger.info("Username: " + usernme + ", CCN: " + ccn);locationClient = new LocationClient(this, this, this); locationClient.connect(); currentUser.setLocation(locationClient.getLastLocation()); ... catch (Exception e) { AlertDialog.Builder builder = new AlertDialog.Builder(this); builder.setMessage("Sorry, this application has experienced an error."); AlertDialog alert = builder.create(); alert.show(); Log.e("ExampleActivity", "Caught exception: " + e + " While on User:" + User.toString()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-31391 | Apache Solr Operator 日志信息泄露漏洞 — Apache Solr Operator | 7.5 | - | 2024-04-12 |
| CVE-2024-31245 | WordPress Plugin ConvertKit 日志信息泄露漏洞 — ConvertKit | 5.3 | Medium | 2024-04-10 |
| CVE-2024-31247 | WordPress Plugin FG Drupal to WordPress 日志信息泄露漏洞 — FG Drupal to WordPress | 5.3 | Medium | 2024-04-10 |
| CVE-2024-31249 | WordPress Plugin Subscribe To Comments Reloaded 日志信息泄露漏洞 — Subscribe To Comments Reloaded | 5.3 | Medium | 2024-04-10 |
| CVE-2024-31254 | WordPress Plugin WordPress Backup & Migration 安全漏洞 — WordPress Backup & Migration | 3.7 | Low | 2024-04-10 |
| CVE-2024-31259 | WordPress Plugin SearchIQ 日志信息泄露漏洞 — SearchIQ | 7.5 | High | 2024-04-10 |
| CVE-2024-31298 | WordPress Plugin User Spam Remover 日志信息泄露漏洞 — User Spam Remover | 5.3 | Medium | 2024-04-10 |
| CVE-2024-31353 | WordPress Plugin Slideshow Gallery LITE 日志信息泄露漏洞 — Slideshow Gallery | 5.3 | Medium | 2024-04-10 |
| CVE-2024-2302 | WordPress Plugin Easy Digital Downloads 安全漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 5.3 | Medium | 2024-04-09 |
| CVE-2024-25030 | IBM DB2 日志信息泄露漏洞 — Db2 for Linux, UNIX and Windows | 6.2 | Medium | 2024-04-03 |
| CVE-2024-3165 | DotCMS 安全漏洞 — dotCMS core | 4.5 | Medium | 2024-04-01 |
| CVE-2024-30523 | WordPress Plugin Paid Memberships Pro 日志信息泄露漏洞 — Paid Memberships Pro – Mailchimp Add On | 5.3 | Medium | 2024-03-31 |
| CVE-2024-30511 | WordPress Plugin FG PrestaShop to WooCommerce 日志信息泄露漏洞 — FG PrestaShop to WooCommerce | 5.3 | Medium | 2024-03-29 |
| CVE-2024-30514 | WordPress Plugin Paid Memberships Pro 日志信息泄露漏洞 — Paid Memberships Pro – Payfast Gateway Add On | 5.3 | Medium | 2024-03-29 |
| CVE-2024-25959 | Dell PowerScale OneFS 日志信息泄露漏洞 — PowerScale OneFS | 7.9 | High | 2024-03-28 |
| CVE-2024-22138 | WordPress Plugin Seraphinite Accelerator 日志信息泄露漏洞 — Seraphinite Accelerator | 5.3 | Medium | 2024-03-28 |
| CVE-2024-25923 | WordPress Plugin Community by PeepSo 日志信息泄露漏洞 — Community by PeepSo | 5.3 | Medium | 2024-03-28 |
| CVE-2024-29945 | Splunk 安全漏洞 — Splunk Enterprise | 7.2 | High | 2024-03-27 |
| CVE-2023-44989 | WordPress Plugin CF7 Google Sheets Connector 日志信息泄露漏洞 — CF7 Google Sheets Connector | 7.5 | High | 2024-03-26 |
| CVE-2024-25957 | Dell Grab 日志信息泄露漏洞 — Grab for Windows | 4.8 | Medium | 2024-03-26 |
| CVE-2022-36407 | Hitachi Virtual Storage Platform 安全漏洞 — Hitachi Virtual Storage Platform | 9.9 | Critical | 2024-03-25 |
| CVE-2024-27097 | CKAN 安全漏洞 — ckan | 4.3 | Medium | 2024-03-13 |
| CVE-2023-43043 | IBM Maximo Application Suite 日志信息泄露漏洞 — Maximo Application Suite - Maximo Mobile for EAM | 5.1 | Medium | 2024-03-13 |
| CVE-2024-28236 | Vela 安全漏洞 — worker | 7.7 | High | 2024-03-12 |
| CVE-2024-28186 | FreeScout 日志信息泄露漏洞 — freescout | 7.1 | High | 2024-03-12 |
| CVE-2023-6814 | Hitachi Cosminexus 日志信息泄露漏洞 — Cosminexus Component Container | 5.6 | Medium | 2024-03-12 |
| CVE-2023-46171 | IBM DS8900F HMC 日志信息泄露漏洞 — DS8900F | 4.3 | Medium | 2024-03-07 |
| CVE-2023-50740 | Apache Linkis 日志信息泄露漏洞 — Apache Linkis DataSource | 7.5AI | High AI | 2024-03-06 |
| CVE-2024-22352 | IBM InfoSphere Information Server 日志信息泄露漏洞 — InfoSphere Information Server | 6.5 | Medium | 2024-03-05 |
| CVE-2023-50951 | IBM QRadar Suite 日志信息泄露漏洞 — QRadar Suite Software | 4.0 | Medium | 2024-02-17 |
CWE-532（通过日志文件的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 770 条 CVE 漏洞。