Base weakness
Draft
CWE-779: Logging of Excessive Data
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.
Last updated
18
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Low
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
While logging is a good practice in general, and very high levels of logging are appropriate for debugging stages of development, too much logging in a production environment might hinder a system administrator's ability to detect anomalous conditions. This can provide cover for an attacker while attempting to penetrate a system, clutter the audit trail for forensic analysis, or make it more difficult to debug problems in a production environment.