CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function | 5.3 |
Moyen |
||
When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access. | 7.8 |
Haute |
||
An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one. | 7.5 |
Haute |