CVE-2019-14268 | BDVDB-2026-119784 Detail

Description#

In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3. The fix was back-ported to LTS 2019.6.5 as well as LTS 2019.3.7.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/OctopusDeploy/Issues/issues/5739

Exploit#

No public exploit known

History#

Version 12019-07-25Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.