Information disclosure

2019-02-2003:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

CPENameOperatorVersion
octopus_deployeq2018.10.3
octopus_deployeq2018.10.2
octopus_deployeq2018.10.1
octopus_deployeq2018.10.0
octopus_deployle2018.9.17
octopus_serverge2018.11.0
octopus_serverlt2019.1.8

Name	Operator	Version
octopus_deploy	eq	2018.10.3
octopus_deploy	eq	2018.10.2
octopus_deploy	eq	2018.10.1
octopus_deploy	eq	2018.10.0
octopus_deploy	le	2018.9.17
octopus_server	ge	2018.11.0
octopus_server	lt	2019.1.8