Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Zentrono

#24197of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2018-10479
9.8
2018-05-21
Octopus · Octopus Deploy · CVE-2018-11320
**Name of the Vulnerable Software and Affected Versions** Octopus Deploy versions 2018.4.4 through 2018.5.1 **Description** The issue concerns the handling of sensitive values in deployment logs. Specifically, Octopus variables sourced from the target do not have their sensitive values obfuscated in the logs. **Recommendations** For versions 2018.4.4 through 2018.5.1, consider restricting access to deployment logs to minimize the risk of sensitive information exposure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.