Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally.
Weakness
The product writes sensitive information to a log file.
Potential Mitigations
References