1. Home
  2. CVE Database
  3. CVE-2020-10750
HIGH · 7.1

CVE-2020-10750

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the con...

Vulnerability Description

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
LinuxfoundationJaeger< 1.18.1

Related Weaknesses (CWE)

CWE-532CWE-200

References

FAQ

What is CVE-2020-10750?

CVE-2020-10750 is a vulnerability with a CVSS score of 7.1 (HIGH). Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the con...

How severe is CVE-2020-10750?

CVE-2020-10750 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-10750?

Check the references section above for vendor advisories and patch information. Affected products include: Linuxfoundation Jaeger.