Description
In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 2018.3.1 – < unspecified, unspecified – < 2021.3.13150, 2022.1.2121 – < unspecified, unspecified – < 2022.1.3281, 2022.2.7897 – < unspecified, unspecified – < 2022.2.8552, 2022.3.348 – < unspecified, unspecified – < 2022.3.10750, 2022.4.791 – < unspecified, unspecified – < 2022.4.8221 | unspecified |
Advisories 1
- WID-SEC-2022-2391 Octopus Deploy: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 21, 2022