Lucene search
PRIOn knowledge basePRION:CVE-2019-14268HistoryJul 25, 2019 - 4:15 p.m.
Cross site request forgery (csrf)
2019-07-2516:15:00
PRIOn knowledge base
www.prio-n.com
In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3. The fix was back-ported to LTS 2019.6.5 as well as LTS 2019.3.7.
| CPE | Name | Operator | Version |
|---|---|---|---|
| octopus_deploy | ge | 3.0.19 | |
| octopus_deploy | le | 2019.7.2 |
Related
cvelist
cvelist
CVE-2019-14268
2019-07-25 15:55:20
cve
cve
CVE-2019-14268
2019-07-25 16:15:13
nvd
nvd
CVE-2019-14268
2019-07-25 16:15:13