CVE-2021-21270

MITTEL 5.5CVE-2021-21270 · Published 22/01/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-21270 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in octopusdsc (octopus).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.28%, höher als bei 20.4% aller Schwachstellen.
Abhilfe: auf 4.0.1002 oder neuer aktualisieren.

Package	Affected versions	Patched versions
octopusdsc octopus	`< 4.0.1002`	`4.0.1002`

Description

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is patched in version 4.0.1002.

References

OctopusDeploy/OctopusDSC commit 24b448e · Patch
OctopusDeploy/OctopusDSC#270 · Patch
OctopusDeploy/OctopusDSC release v4.0.1002 · Release Notes
OctopusDeploy/OctopusDSC security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free