Lucene search
+L

89 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•3 views

CVE-2024-45784: Debug Messages Revealing Unnecessary Information

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially...

7.5CVSS7.2AI score0.01341EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/25 6:15 a.m.•17 views

CVE-2024-6972

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text...

6.5CVSS5.8AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/25 12:00 a.m.•17 views

Octopus Server 安全漏洞

Octopus Server is a deployment automation and release management tool for continuous delivery from Octopus Australia. A security vulnerability exists in Octopus Server that stems from the fact that under certain circumstances, sensitive variables may be printed in plaintext in the task log...

6.5CVSS6.7AI score0.00228EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/14 4:17 p.m.•32 views

PYSEC-2024-264

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS6AI score0.01572EPSS
SaveExploits0References4
PyPA
PyPA
•added 2024/05/14 4:17 p.m.•20 views

PYSEC-2024-264

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS6AI score0.01572EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/10/12 5:15 p.m.•19 views

CVE-2020-25825

In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs...

7.5CVSS7.1AI score0.0154EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/10/12 4:09 p.m.•36 views

CVE-2020-25825

In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs...

7.4AI score0.0154EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/12 12:00 a.m.•3 views

CVE-2020-25825: Undefined Security Weakness

In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs...

7.5CVSS5.8AI score0.0154EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/09 12:00 a.m.•4 views

CVE-2020-24566: Insertion of Sensitive Information into Log File

In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment or runbook process using Azure steps and sets the step's execution location to run on the server/worker, then under certain circumstances the account password is exposed in...

7.5CVSS5.9AI score0.01812EPSS
SaveExploits0References2
Rows per page
Query Builder