Lucene search

K
osvGoogleOSV:GHSA-GH32-PC56-4C96
HistoryMay 18, 2021 - 6:35 p.m.

Information Exposure in jaeger

2021-05-1818:35:02
Google
osv.dev
12
information exposure
log file
kafka
data store
credentials

EPSS

0

Percentile

12.6%

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container’s log file to discover the Kafka credentials.

EPSS

0

Percentile

12.6%