In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10.
CPE | Name | Operator | Version |
---|---|---|---|
octopus_server | ge | 2019.7.3 | |
octopus_server | le | 2019.7.9 |