high7.5
CVE-2020-25825
In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.
Impact
In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Deploy | from 3.1.0 through 2020.4.0 |
References
- NVD record
- CVE.org record
- https://github.com/OctopusDeploy/Issues/issues/6604
- https://github.com/OctopusDeploy/Issues/issues/6605
- https://github.com/OctopusDeploy/Issues/issues/6606
- https://github.com/OctopusDeploy/Issues/issues/6607
- https://github.com/OctopusDeploy/Issues/issues/6604
- https://github.com/OctopusDeploy/Issues/issues/6605
- https://github.com/OctopusDeploy/Issues/issues/6606
- https://github.com/OctopusDeploy/Issues/issues/6607