Lucene search
HistoryMay 02, 2023 - 5:15 a.m.
CVE-2023-2247
octopus deploy
variable secrets
unmask
preview function
cve-2023-2247
nvd
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.4%
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
Affected configurations
Node
octopusoctopus_deployRange2018.3.0–2022.3.10929
ORoctopusoctopus_deployRange2022.4.0–2022.4.8319
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Octopus Server",
"vendor": "Octopus Deploy",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "2018.3.0",
"versionType": "custom"
},
{
"lessThan": "2022.3.10929",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "2022.4.791",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "2022.4.8319",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2023-2247
2023-05-02 00:00:00
nvd
nvd
CVE-2023-2247
2023-05-02 05:15:28
prion
prion
Code injection
2023-05-02 05:15:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.4%
Related for CVE-2023-2247