1641
log.warn("Login by user successful.");
RunProgram();
} else {
// Login unsuccessful
log.warn("Login attempt by user failed, trying again.");
LoginRetry();
}
Example 3:
Consider this command for updating Azure's Storage Logging for Blob service, adapted from
[REF-1307]:
Example Language: Shell (Bad)
az storage logging update --account-name --account-key --services b --log d --retention 90
The "--log d" portion of the command says to log deletes. However, the argument does not include
the logging of writes and reads. Adding the "rw" arguments to the -log parameter will fix the issue:
Example Language: Shell (Good)
az storage logging update --account-name --account-key --services b --log rwd --retention 90
To enable Azure's storage analytic logs programmatically using PowerShell:
Example Language: Shell (Good)
Set-AzStorageServiceLoggingProperty -ServiceType Queue -LoggingOperations read,write,delete -RetentionDays 5 -
Context $MyContextObject
Notice that here, the retention has been limited to 5 days.
Observed Examples
Reference Description
CVE-2008-4315 server does not log failed authentication attempts, making it easier for
attackers to perform brute force password guessing without being detected
https://www.cve.org/CVERecord?id=CVE-2008-4315
CVE-2008-1203 admin interface does not log failed authentication attempts, making it easier for
attackers to perform brute force password guessing without being detected
https://www.cve.org/CVERecord?id=CVE-2008-1203
CVE-2007-3730 default configuration for POP server does not log source IP or username for
login attempts
https://www.cve.org/CVERecord?id=CVE-2007-3730
CVE-2007-1225 proxy does not log requests without "http://" in the URL, allowing web surfers to
access restricted web content without detection
https://www.cve.org/CVERecord?id=CVE-2007-1225
CVE-2003-1566 web server does not log requests for a non-standard request type
https://www.cve.org/CVERecord?id=CVE-2003-1566
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1036 OWASP Top Ten 2017 Category A10 - Insufficient
Logging & Monitoring
1026 2439
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
CWE Version 4.14
CWE-779: Logging of Excessive Data
CWE-779: Logging of Excessive Data