EUVD-2019-6635

Malware in sbrugna...

CVE-2019-15698

CVE-2019-15698 affects Octopus Deploy versions 2019.7.3 through 2019.7.9. In certain circumstances, an authenticated user with VariableView permissions could view sensitive values. The issue has been fixed in 2019.7.10. According to NVD, the CVSS scores are low-to-medium: CVSSv2 base 4.0 (Medium)...

CVE-2019-15698

In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10...

PT-2019-14330

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions 2019.7.3 through 2019.7.9 Description The issue allows an authenticated user with VariableView permissions to view sensitive values under certain circumstances. Recommendations For versions 2019.7.3 through 2019.7.9,...

CVE-2019-15698: Undefined Security Weakness

In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10...

CVE-2018-10581

In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area for Environments that do not exist within their associated Team scoping. This occurs in situations where this authenticated user also belongs to multiple...

PT-2018-9977

Name of the Vulnerable Software and Affected Versions: Octopus Deploy versions 3.4.x through 2018.4.6 Description: The issue allows an authenticated user to view, update, or save variable values within the Tenant Variables area for Environments that do not exist within their associated Team...