VDB

RHSA-2020:2636

RHSA-2020:2636 PUBLISHED CVSS 7.099999904632568 HIGH

An information disclosure vulnerability was found in jaegertracing/jaeger. When the Kafka data store is used, this flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

Risk Scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatdistributed-tracing/jaeger-collector-rhel7@sha256:b7c94be285b8f3dec3db1c2417da2d710537a13815205715be457630adad7e67_amd64 as a component of Red Hat OpenShift Jaeger 1.17distributed-tracing/jaeger-collector-rhel7@sha256:b7c94be285b8f3dec3db1c2417da2d710537a13815205715be457630adad7e67_amd64
Red Hatdistributed-tracing/jaeger-ingester-rhel7@sha256:cd5ac8fcde0c3ae9cbc220d18fe800671c2698dc053a2ee0958d9bf3f0692f91_amd64 as a component of Red Hat OpenShift Jaeger 1.17distributed-tracing/jaeger-ingester-rhel7@sha256:cd5ac8fcde0c3ae9cbc220d18fe800671c2698dc053a2ee0958d9bf3f0692f91_amd64
Red Hatdistributed-tracing/jaeger-all-in-one-rhel7@sha256:fb45c2a6ccc2bcb2343245efff119a14ba1f30bb6da3ab5771d02fc6378c78a2_amd64 as a component of Red Hat OpenShift Jaeger 1.17distributed-tracing/jaeger-all-in-one-rhel7@sha256:fb45c2a6ccc2bcb2343245efff119a14ba1f30bb6da3ab5771d02fc6378c78a2_amd64

Timeline

  • Jun 19, 2020 CVE Published
  • Mar 18, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›