Security

Insufficient Logging (CWE-778)

Insufficient logging is a weakness, tracked as CWE-778, where software fails to record a security-relevant event or records it without the details needed to investigate it.

Deep dive

Learn Article

What Is an Insufficient Logging Vulnerability (CWE-778)?

An insufficient logging vulnerability lets actions happen without an audit record. Why CWE-778 scores low on CVSS and how to find these gaps.

beginner 4 min read

Back to glossary