Skip to content
OpenAdvisories
Unscored CVE-2021-31820 EUVD-2021-18695GHSA-c5px-3mxp-74qc

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown i…

Published Aug 18, 2021 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2018.8.2 – < unspecified, unspecified – < 2020.6.5310, 2021.1.7149 – < unspecified, unspecified – < 2021.1.7622 unspecified

References