CVE-2019-15508

Name of the Vulnerable Software and Affected Versions Octopus Tentacle versions 3.0.8 through 5.0.0

Description The issue allows an authenticated user, under specific circumstances involving OctopusPrintVariables, to trigger a deployment that writes the web request proxy password to the deployment log in cleartext when a web request proxy is configured.

Recommendations For versions 3.0.8 through 4.0.6, update to version 4.0.7. For versions 4.0.7 through 5.0.0, update to version 5.0.1.