x/vulndb: potential Go vuln in github.com/jaegertracing/jaeger/pkg/kafka/auth: GHSA-gh32-pc56-4c96

[GoVulnBot]

In GitHub Security Advisory GHSA-gh32-pc56-4c96, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/jaegertracing/jaeger/pkg/kafka/auth	1.18.1	< 1.18.1

Cross references:

• CVE-2020-10750 appears in issue x/vulndb: potential Go vuln in github.com/jaegertracing/jaeger/pkg/kafka/auth: GHSA-gh32-pc56-4c96 #834 NOT_IMPORTABLE
• GHSA-gh32-pc56-4c96 appears in issue x/vulndb: potential Go vuln in github.com/jaegertracing/jaeger/pkg/kafka/auth: GHSA-gh32-pc56-4c96 #834 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - fixed: 1.18.1
    packages:
      - package: github.com/jaegertracing/jaeger/pkg/kafka/auth
description: Sensitive information written to a log file vulnerability was found in
    jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used.
    This flaw allows an attacker with access to the container's log file to discover
    the Kafka credentials.
cves:
  - CVE-2020-10750
ghsas:
  - GHSA-gh32-pc56-4c96

[tatianab]

Duplicate of #834