Description (CNA)
Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| the Jager project / jaegertracing/jaeger | affected 1.18.1 |
CWE
CWE-532, CWE-200
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750
- https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1
ADP enrichment
No English description supplied.