Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy. An attacker exploited the vulnerability to perform a regular expression denial of service using Variable Project...

Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from performing a regular expression denial of service against build information request validation...

PT-2022-14180 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows sensitive variables to be unmasked by utilizing the variable preview feature in affected versions of the software. Recommendations: At the moment, there is no...

CVE-2022-2074: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...

CVE-2022-1901: Improper Privilege Management

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

PT-2022-14706 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service via the package upload function. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2022-14840 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service using the Variable Project Template in affected versions of Octopus Deploy. Recommendations: At the moment, there is no information abo...

PT-2022-14841 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service targeting the build information request validation. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-2049: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...

CVE-2022-2075: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...

CVE-2022-30532

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

CVE-2022-30532

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

CVE-2022-30532

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

Design/Logic Flaw

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

CVE-2022-30532

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

CVE-2022-30532

CVE-2022-30532 affects Octopus Deploy with a root cause described as lack of logging for changes to artifacts. Connected sources (e.g., CNNVD-202207-1611) enumerate broad affected version ranges across multiple Octopus Deploy releases, indicating a systemic logging gap rather than a targeted comp...

CVE-2022-30532: Undefined Security Weakness

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...

PT-2022-20161 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue concerns the lack of logging for changes made to artifacts within the system. There is no information provided about the estimated number of potentially affected devices...

Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the lack of logging of artifact changes in Octopus Deploy. The following versions are affected: all...

Jenkins Octopus Deploy Plugin stores credentials in plain text

Jenkins Octopus Deploy Plugin stores credentials unencrypted in its global configuration file hudson.plugins.octopusdeploy.OctopusDeployPlugin.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...