medium4.9
CVE-2019-14525
In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive valu…
Impact
In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive values by visiting a server configuration page or making an API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Deploy | from 2019.4.0 before 2019.6.6 |
| Octopus | Octopus Server | from 2019.7.0 before 2019.7.6 |
References
- NVD record
- CVE.org record
- https://github.com/OctopusDeploy/Issues/issues/5753
- https://github.com/OctopusDeploy/Issues/issues/5754
- https://octopus.com/downloads/compare?from=2019.6.6&to=2019.7.7
- https://github.com/OctopusDeploy/Issues/issues/5753
- https://github.com/OctopusDeploy/Issues/issues/5754
- https://octopus.com/downloads/compare?from=2019.6.6&to=2019.7.7