CVE-2022-2721
High
Description
In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.
SeverityHigh
CVSS7.5
Exploit probability50. percentile0.6%
ProductOctopus Server
PublishedNov 25, 2022
First seenNov 25, 2022
Weakness typeCWE-532CWE-532
How to fix
Update
- octopus octopus_server2022.2.7965, 2022.3.9163 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| octopus octopus_server | 2022.2.6729 ≤ v < 2022.2.7965, 2022.3.348 ≤ v < 2022.3.9163 | 2022.2.7965, 2022.3.9163 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.