Home / Vulnerability Database / Go : Logging into system output
Go
Go : Logging into system output
Classification
OWASP Top 10 2017
CWE
Overview
The application uses unstructured logging (error messages are outputted to standard streams). Instead, it is recommended to use a structured logging.
Structured logging using specially designed structures can generate a log with the levels, time stamps, and standard formatting. Using standard streams to output error messages while there is a mechanism of structured logging in a program can lead to absence of critical information in the log.
Outputting error messages to standard streams is only permissible on the early stages of development.
References
LOW
DerScanner Severity Score
Do you want to fix Go : Logging into system output in your application?
See also
Go
Go : Undocumented feature: special account
Go
Go : Nil salt
Go