CVE-2020-10750

Description

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

References

https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3