medium4.3
CVE-2023-4509
It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt.
Impact
It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 2018.9.0 before 2023.4.296 |