CVE-2022-3460

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

CVE-2022-3460

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

Code injection

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

Octopus Deploy 输入验证错误漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the ability of users logging into certain browsers of Octopus Server using AD to bypass...

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...

CVE-2022-3614: URL Redirection to Untrusted Site

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...

PT-2023-13457 · Microsoft · Active Directory

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows users of certain browsers using Active Directory AD to sign-in to Octopus Server to bypass authentication checks. These users can be redirected to the configured...

CVE-2022-3614

CVE-2022-3614 affects Octopus Deploy. The vulnerability enables users authenticating via AD in certain browsers to bypass authentication checks during sign-in and be redirected to the configured redirect URL without validation, effectively leaking session/auth context through an unchecked redirec...

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...

CVE-2022-3460: Improper Removal of Sensitive Information Before Storage or Transfer

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

Octopus Deploy 信息泄露漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the fact that certain types of sensitive variables may be inadvertently exposed when viewed in the...

PT-2023-13416 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows certain types of sensitive variables to become unmasked when viewed in variable preview. Recommendations: At the moment, there is no information about a newer versio...

CVE-2022-3460

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

CVE-2022-3460

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview...

CVE-2022-3460

CVE-2022-3460 affects Octopus Deploy; certain types of sensitive variables may be unmasked when viewed in the variable preview. The CVSS 3.1 metrics indicate a HIGH impact (7.5) with Network attack vector, Low attack complexity, and no privileges or user interaction required, but confidentiality ...

Fedora 36 : rust-capnp / rust-sequoia-octopus-librnp (2022-fd7eeedd02)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-fd7eeedd02 advisory. Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application...

[SECURITY] Fedora 36 Update: rust-sequoia-octopus-librnp-1.4.1-2.fc36

Reimplementation of RNP's interface using Sequoia for use with Thunderbird...

Fedora: Security Advisory for rust-sequoia-octopus-librnp (FEDORA-2022-7002ec8b22)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rust-sequoia-octopus-librnp (FEDORA-2022-fd7eeedd02)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Octopus Server Information Disclosure Vulnerability

Octopus Server is an automated deployment platform. An information disclosure vulnerability exists in Octopus Server versions 2022.2.6729 and later through 2022.2.7965 and 2022.3.348 and later through 2022.3.9163. An attacker can exploit this vulnerability to obtain sensitive information...