PT-2021-19528
CVE-2021-31820
·
تاريخ النشر
2021-08-18
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Octopus Server versions 2018.8.3 and later
Description
The issue concerns the Octopus Server Web Request Proxy, where if configured with authentication, the password is displayed in plaintext in the UI.
Recommendations
For Octopus Server versions 2018.8.3 and later, consider disabling the Web Request Proxy authentication until a fix is available to prevent the password from being shown in plaintext.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾