Security Logging and Monitoring Failures

[GeraldEvans07]

Logging is a vital part of a development lifecycle to help identify runtime behavior and events. Unfortunately it is easy to provide insufficient or dangerous logs that an attacker could manipulate or expose sensitive information.

I propose writing a case study delving into the various security vulnerabilities involved with logging. These include improper output validation, insufficient logging, exposing secrets, and log injection.

References:

• CWE-117
• CWE-223
• CWE-532
• CWE-778

[abuttner]

Try to pick one of the vulnerabilities and underlying weaknesses for the purposes of a case study. Keep things very focused. Are you able to pick a single issue from your list above?