CVE-2021-26556: Untrusted Search Path

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access...

Octopus Server 代码问题漏洞

Octopus Server is an automated deployment platform. Octopus Server has a security vulnerability that could result in non-privileged users gaining privileged access when Octopus Server is installed using a custom folder location...

CVE-2021-26557: Untrusted Search Path

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access...

PT-2021-17035

Name of the Vulnerable Software and Affected Versions Octopus Tentacle affected versions not specified Description The issue arises when Octopus Tentacle is installed using a custom folder location, resulting in incorrect folder ACLs. This could allow an unprivileged user to exploit DLL...

Octopus Tentacle 代码问题漏洞

Octopus Server is an automated deployment platform. Octopus Tentacle has a security vulnerability that could result in unprivileged users gaining privileged access when Octopus Tentacle is installed using a custom folder location...

CVE-2021-31820

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

CVE-2021-31820

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

CVE-2021-31820

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

Authentication flaw

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

CVE-2021-31820

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

CVE-2021-31820

CVE-2021-31820 affects Octopus Server. When the Web Request Proxy is configured with authentication, the password is displayed in plaintext in the UI after version 2018.8.2. The available sources confirm the same vulnerability description across Red Hat and NVD records. The documents do not provi...

CVE-2021-31820: Cleartext Storage of Sensitive Information

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...

PT-2021-19528

Name of the Vulnerable Software and Affected Versions Octopus Server versions 2018.8.3 and later Description The issue concerns the Octopus Server Web Request Proxy, where if configured with authentication, the password is displayed in plaintext in the UI. Recommendations For Octopus Server...

Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server. No information about the vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Octopus Server Sensitive Information Explicit Storage Vulnerability

Octopus Server is an automated deployment platform. Octopus Server is vulnerable to a plaintext storage of sensitive information, which stems from database passwords being written in plaintext to the OctopusServer.txt log file. No detailed vulnerability details are currently available...

Octopus Server Explicit Storage of Sensitive Information Vulnerability (CNVD-2021-59134)

Octopus Server is an automated deployment platform. Octopus Server is vulnerable to a plaintext storage of sensitive information, which stems from database passwords being written in plaintext to the OctopusServer.txt log file. No detailed vulnerability details are currently available...

CVE-2021-31817

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...

CVE-2021-31816

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...

CVE-2021-31817

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...

Code injection

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...