CWE-532 通过日志文件的信息暴露 类弱点 770 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-532指将敏感信息写入日志文件的漏洞，属于信息泄露类安全风险。攻击者常通过读取服务器日志或访问日志存储位置，窃取密码、密钥或个人隐私数据，进而实施身份冒充或横向移动。开发者应避免在日志中记录明文凭证、会话令牌或敏感业务数据，采用数据脱敏、加密存储及严格的日志访问控制机制，确保仅记录必要的非敏感审计信息，从而降低数据泄露风险。
logger.info("Username: " + usernme + ", CCN: " + ccn);locationClient = new LocationClient(this, this, this); locationClient.connect(); currentUser.setLocation(locationClient.getLastLocation()); ... catch (Exception e) { AlertDialog.Builder builder = new AlertDialog.Builder(this); builder.setMessage("Sorry, this application has experienced an error."); AlertDialog alert = builder.create(); alert.show(); Log.e("ExampleActivity", "Caught exception: " + e + " While on User:" + User.toString()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-22337 | IBM Cloud Pak for Security 日志信息泄露漏洞 — QRadar Suite Software | 5.1 | Medium | 2024-02-17 |
| CVE-2024-22336 | IBM QRadar Suite 日志信息泄露漏洞 — QRadar Suite Software | 5.1 | Medium | 2024-02-17 |
| CVE-2024-22335 | IBM QRadar Suite 日志信息泄露漏洞 — QRadar Suite Software | 5.1 | Medium | 2024-02-17 |
| CVE-2024-22464 | Dell EMC AppSync 日志信息泄露漏洞 — AppSync | 6.2 | Medium | 2024-02-08 |
| CVE-2024-23448 | Elastic APM 日志信息泄露漏洞 — APM Server | 5.7 | Medium | 2024-02-07 |
| CVE-2024-24939 | JetBrains Rider 安全漏洞 — Rider | 3.3 | Low | 2024-02-06 |
| CVE-2024-0935 | Dassault Systèmes DELMIA Apriso 日志信息泄露漏洞 — DELMIA Apriso | 4.4 | Medium | 2024-02-01 |
| CVE-2024-0831 | HashiCorp Vault 日志信息泄露漏洞 — Vault | 4.5 | Medium | 2024-02-01 |
| CVE-2023-46230 | Splunk 安全漏洞 — Splunk Add-on Builder | 8.2 | High | 2024-01-30 |
| CVE-2023-46231 | Splunk 安全漏洞 — Splunk Add-on Builder | 8.8 | Medium | 2024-01-30 |
| CVE-2024-23840 | GoReleaser 日志信息泄露漏洞 — goreleaser | 5.5 | Medium | 2024-01-30 |
| CVE-2024-23791 | OTRS 日志信息泄露漏洞 — OTRS | 4.9 | Medium | 2024-01-29 |
| CVE-2023-51702 | Apache Airflow 安全漏洞 — Apache Airflow CNCF Kubernetes provider | 6.5 | - | 2024-01-24 |
| CVE-2024-23677 | Splunk 安全漏洞 — Splunk Enterprise | 4.3 | Medium | 2024-01-22 |
| CVE-2024-23686 | DependencyCheck 日志信息泄露漏洞 | 6.2 | - | 2024-01-19 |
| CVE-2024-21668 | React Native 日志信息泄露漏洞 — react-native-mmkv | 4.4 | Medium | 2024-01-09 |
| CVE-2023-51408 | WordPress Plugin WP Optin Wheel 信息泄露漏洞 — WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce | 5.3 | Medium | 2024-01-08 |
| CVE-2023-51490 | WordPress Plugin Defender Security 信息泄露漏洞 — Defender Security – Malware Scanner, Login Security & Firewall | 5.3 | Medium | 2024-01-08 |
| CVE-2023-51508 | WordPress Plugin Database Cleaner: Clean, Optimize & Repair 信息泄露漏洞 — Database Cleaner: Clean, Optimize & Repair | 5.3 | Medium | 2024-01-08 |
| CVE-2023-52143 | WordPress Plugin WP Stripe Checkout 信息泄露漏洞 — WP Stripe Checkout | 7.5 | High | 2024-01-05 |
| CVE-2023-52146 | WordPress Plugin 404 Solution 信息泄露漏洞 — 404 Solution | 5.3 | Medium | 2024-01-05 |
| CVE-2023-46742 | CubeFS 日志信息泄露漏洞 — cubefs | 4.8 | Medium | 2024-01-03 |
| CVE-2023-6802 | GitHub Enterprise Server 安全漏洞 — Enterprise Server | 7.2 | High | 2023-12-21 |
| CVE-2023-6746 | GitHub Enterprise Server 安全漏洞 — Enterprise Server | 8.1 | High | 2023-12-21 |
| CVE-2023-46675 | Elastic Kibana 安全漏洞 — Kibana | 8.0 | High | 2023-12-13 |
| CVE-2023-46671 | Elastic Kibana 安全漏洞 — Kibana | 8.0 | High | 2023-12-13 |
| CVE-2023-6687 | Elastic 安全漏洞 — Elastic Agent | 6.8 | Medium | 2023-12-12 |
| CVE-2023-49922 | Elastic 安全漏洞 — Beats | 6.8 | Medium | 2023-12-12 |
| CVE-2023-49923 | Elastic Enterprise Search 其他漏洞 — Enterprise Search | 6.8 | Medium | 2023-12-12 |
| CVE-2023-48708 | CodeIgniter Shield 日志信息泄露漏洞 — shield | 5.0 | Medium | 2023-11-24 |
CWE-532（通过日志文件的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 770 条 CVE 漏洞。