NetSight
high7.5

CVE-2021-31816

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServ…

Impact

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.

Affected products

VendorProductAffected versions
OctopusServer
before 2020.6.5146
from 2021.1.0 before 2021.1.7316

Weakness classification

References