| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2019.7.3, ≤ 2019.7.9 |
In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free