CVE-2021-31817

Description

References

• advisories.octopus.com/adv/2021-06---Cleartext-Storage-of-Sensitive-Information-%28CVE-2021-31817%29.2121138201.html

More vulnerabilities in server

• CVE-2022-1502MEDIUM 4.3Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users wi…
• CVE-2021-31816HIGH 7.5When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written…
• CVE-2021-31818MEDIUM 4.3Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied d…
• CVE-2021-30183HIGH 7.5Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export …
• CVE-2020-16197MEDIUM 4.3An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that is outside the scop…