CVE-2021-31818

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables...

CVE-2021-31818: Improper Neutralization of Special Elements used in an SQL Command

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables...

Octopus Deploy SQL注入漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. An SQL injection vulnerability exists in Octopus Server that stems from the data provided by a user in an Events REST API request not being properly parameterized...

PT-2021-19525

Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description The issue is related to an authenticated SQL injection vulnerability in the Events REST API. This occurs because user-supplied data in the API request is not parameterized correctly...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

Code injection

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2021-30183

The CVE-2021-30183 issue affects Octopus Server across multiple versions, where during import/export operations the password used to encrypt/decrypt sensitive values is written in plaintext to logs. Root cause is cleartext storage of sensitive information in log output. Public documents confirm t...

CVE-2021-30183: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

PT-2021-18657

Name of the Vulnerable Software and Affected Versions Octopus Server versions affected versions not specified Description The issue concerns the cleartext storage of sensitive information in Octopus Server. In certain situations, when running import or export processes, the password used to encry...

Octopus Server 安全漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Server that stems from storing sensitive information in plaintext in multiple versions of Octopus Server, where in some...

XSS Vulnerability in Octopus-Forum

Octopus-Forum is a community system developed using java. Octopus-Forum suffers from an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Command Execution Vulnerability in Octopus Technology Limited's Code Up App

Code on the line is a service app for subway travel. A command execution vulnerability exists in the Code Up APP of Octopus Technology Limited, which can be exploited by an attacker to gain control of the server...

Private Octopus picoquic Input Validation Error Vulnerability

Private Octopus picoquic is a management system of the Private Octopus organization in the United States. Provides feedback on the development of the QUIC standard in the IETF QUIC WG. An input validation error vulnerability exists in Private Octopus picoquic, which stems from allowing an attacke...

openSUSE Security Update : ceph (openSUSE-2020-2327)

This update for ceph fixes the following issues : Security issue fixed : - CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1180155, bsc1179802. Non-security issues fixed : - Update to 15.2.8-80-g1f4b6229ca : + Rebase on tip of upstream 'octopus' branch,...

CVE-2021-21270

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is...

Design/Logic Flaw

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is...

Octopus DSC Security Breach

Octopus DSC is a PowerShell module with DSC resources that can be used to install and configure Octopus Deploy servers and reach agents. A security vulnerability exists in Octopus DSC version 4.0.977 and earlier, which stems from a vulnerability that allows client API keys used to connect to the...