Plaintext Password Exposure in Octopus Server by Octopus Deploy
CVE-2021-31820

7.5HIGH

Key Information:

Vendor

Octopus Deploy

Status
Octopus Server
Vendor
CVE Published:
18 August 2021

What is CVE-2021-31820?

A vulnerability exists in Octopus Server versions post-2018.8.2, where configuring the Web Request Proxy with authentication leads to the exposure of passwords in plaintext within the user interface. This flaw may allow unauthorized access to sensitive credentials, highlighting a significant security concern for users relying on this feature.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Octopus Server 2018.8.2

Octopus Server < 2020.6.5310

Octopus Server 2021.1.7149

References

https://advisories.octopus.com/adv/2021-07---Proxy-Passwo...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.