NetSight
medium4.2

CVE-2023-1904

In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server.

Impact

In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server.

Affected products

VendorProductAffected versions
OctopusOctopus Server
from 2022.1.2121 before 2023.1.11942
from 2023.2.2028 before 2023.2.13151
from 2023.3.317 before 2023.3.5049

Weakness classification

References