Vulnerabilities > Octopus > Octopus Server > 2018.11.2

DATE CVE VULNERABILITY TITLE RISK
2021-08-18 CVE-2021-31820 Cleartext Storage of Sensitive Information vulnerability in Octopus Server
In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.
network
low complexity
octopus CWE-312
7.5
7.5
2019-02-20 CVE-2019-8944 Information Exposure Through Log Files vulnerability in Octopus Deploy
An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.
network
low complexity
octopus CWE-532
6.5
6.5