VYPR

CWE-779

Logging of Excessive Data

BaseDraftLikelihood: Low

Description

The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.

While logging is a good practice in general, and very high levels of logging are appropriate for debugging stages of development, too much logging in a production environment might hinder a system administrator's ability to detect anomalous conditions. This can provide cover for an attacker while attempting to penetrate a system, clutter the audit trail for forensic analysis, or make it more difficult to debug problems in a production environment.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (23)

page 2 of 2
  • CVE-2025-53651MedJul 9, 2025
    Jenkins Project
    HTML Publisher
    risk 0.00cvss 6.3epss 0.00

    Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log.

  • CVE-2025-53650HigJul 9, 2025
    Jenkins Project
    Credentials Binding
    risk 0.00cvss 7.3epss 0.00

    Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.

  • CVE-2024-55628HigJan 6, 2025
    Suricata
    Suricata
    risk 0.00cvss 7.5epss 0.01

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to…