CVE-2020-10750

Опубликовано: 19 июн. 2020

Источник: nvd

CVSS3: 7.1

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750
Issue Tracking
Patch
Third Party Advisory
https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1
Release Notes
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750
Issue Tracking
Patch
Third Party Advisory
https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:jaeger:*:*:*:*:*:*:*:*

Версия до 1.18.1 (исключая)

EPSS

Процентиль: 19%

0.0006

Низкий

7.1 High

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

CWE-532

Связанные уязвимости

CVE-2020-10750

CVSS3: 7.1

redhat

больше 5 лет назад

GHSA-gh32-pc56-4c96

CVSS3: 5.5

github

больше 4 лет назад

Information Exposure in jaeger

EPSS

Процентиль: 19%

0.0006

Низкий

7.1 High

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

CWE-532