Octopus Server Security Vulnerabilities and Issues — Octopus Server CVE List

Lucene search

OctopusOctopus Server

3 matches found

CVE•added 2024/04/18 12:15 a.m.•78 views

CVE-2023-4509

It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt.

4.3CVSS6.8AI score0.00068EPSS

CVE•added 2024/04/30 2:15 a.m.•47 views

CVE-2024-4226

It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed.

3.5CVSS6.7AI score0.00091EPSS

CVE•added 2024/04/09 1:15 a.m.•24 views

CVE-2024-2975

A race condition was identified through which privilege escalation was possible in certain configurations.

8.8CVSS7.1AI score0.00299EPSS