Vulnerabilities (CVE)

Filtered by CWE-532
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-5137 1 Sendquick 4 Avera Sms Gateway, Avera Sms Gateway Firmware, Entera Sms Gateway and 1 more 2017-02-09 5.0 MEDIUM 6.2 MEDIUM
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
CVE-2016-8912 1 Ibm 1 Kenexa Lms On Cloud 2017-02-07 4.0 MEDIUM 4.3 MEDIUM
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticated user.
CVE-2016-4443 1 Redhat 1 Enterprise Virtualization 2016-12-16 2.1 LOW 5.5 MEDIUM
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
CVE-2016-2928 1 Ibm 1 Bigfix Remote Control 2016-11-30 4.0 MEDIUM 4.3 MEDIUM
IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs.
CVE-2016-5967 1 Ibm 1 Rational Asset Analyzer 2016-11-28 2.1 LOW 5.5 MEDIUM
The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs.