AIKIDO-2025-10059
applicationinsights-agent is vulnerable to Insertion of Sensitive Information into Log File
17
Low Risk
This Affects:
applicationinsights-agentTL;DR
Affected versions of this package may expose user passwords or tokens in logs generated by the self-diagnostics feature of the agent tooling. This occurs due to improper redaction of sensitive information, potentially allowing unauthorized access to credentials if logs are accessed by malicious actors.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
applicationinsights-agent is vulnerable to Insertion of Sensitive Information into Log File in versions 3.4.5 - 3.6.2.
How to fix this
Upgrade the com.microsoft.azure:applicationinsights-agent library to the patch version.
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant