PT-2021-14377
CVE-2021-21270
·
تاريخ النشر
2021-01-22
·
تاريخ التحديث
2021-02-01
الوصف من
CVSS 3.1
6.2
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
OctopusDSC versions 4.0.977 and earlier
Description:
The issue concerns the exposure of a customer API key used to connect to Octopus Server via logging in plaintext. This occurs in the context of OctopusDSC, a PowerShell module with DSC resources for installing and configuring an Octopus Deploy Server and Tentacle agent.
Recommendations:
For OctopusDSC versions 4.0.977 and earlier, update to version 4.0.1002 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾