Octopus

Octopus Server

65 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2019-8944

  • EPSS 1.55%
  • Veröffentlicht 20.02.2019 03:29:00
  • Zuletzt bearbeitet 21.11.2024 04:50:42

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

9

CVE-2018-18850

  • EPSS 12.48%
  • Veröffentlicht 31.10.2018 03:29:00
  • Zuletzt bearbeitet 21.11.2024 03:56:44

In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, runn...

7.5

CVE-2018-12089

  • EPSS 0.93%
  • Veröffentlicht 11.06.2018 10:29:00
  • Zuletzt bearbeitet 21.11.2024 03:44:34

In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed w...

9.8

CVE-2018-11320

  • EPSS 1.38%
  • Veröffentlicht 21.05.2018 14:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:07

In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs.

6.3

CVE-2017-11348

  • EPSS 1.22%
  • Veröffentlicht 17.07.2017 13:18:21
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversa...