Description
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 2018.3.0 – < unspecified, unspecified – < 2022.3.10929, unspecified – < 2022.4.791, unspecified – < 2022.4.8319 | unspecified |
Advisories 1
- WID-SEC-2023-1105 Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · May 1, 2023