Vulnerabilities > Octopus > Octopus Server > 2019.7.4

DATE CVE VULNERABILITY TITLE RISK
2019-08-27 CVE-2019-15698 Unspecified vulnerability in Octopus Server
In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values.
network
low complexity
octopus
4.0
2019-08-05 CVE-2019-14525 Unspecified vulnerability in Octopus Deploy and Octopus Server
In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive values by visiting a server configuration page or making an API call.
network
low complexity
octopus
4.0