CVE-2020-10750

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-532

Affected software

Vendor	Product	Versions
the Jager project	jaegertracing/jaeger	1.18.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750Issue Tracking, Patch, Third Party Advisory
https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1Release Notes, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750Issue Tracking, Patch, Third Party Advisory
https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1Release Notes, Third Party Advisory

Timeline

Published: Jun 19, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-107516.1A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would onl CVE-2020-107527.5A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API CVE-2020-107536.5A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers vi CVE-2020-107544.3It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when c CVE-2020-107556.5An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions CVE-2020-107566.5An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_sen CVE-2020-107577.8A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker w CVE-2020-107587.5A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified CVE-2020-107596.0A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a CVE-2020-10765.5A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulne CVE-2020-107606.5A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuratio CVE-2020-107615.0An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when a