Skip to content
OpenAdvisories
Unscored CVE-2022-1901 EUVD-2022-25173GHSA-rrhg-rvvx-6575

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

Published Aug 19, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.7.3 – < unspecified, unspecified – < 2022.1.3009, 2022.2.6729 – < unspecified, unspecified – < 2022.2.7244, 2022.3.348 – < unspecified, unspecified – < 2022.3.4953 unspecified

References