Code injection

2018-05-2114:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs.

CPENameOperatorVersion
octopus_serverge2018.4.4
octopus_serverle2018.5.1

CPE	Name	Operator	Version
	octopus_server	ge	2018.4.4
	octopus_server	le	2018.5.1

References

github.com/OctopusDeploy/Issues/issues/4578