PT-2021-19528
CVE-2021-31820
·
Published
2021-08-18
·
Updated
2021-08-25
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Octopus Server versions 2018.8.3 and later
Description
The issue concerns the Octopus Server Web Request Proxy, where if configured with authentication, the password is displayed in plaintext in the UI.
Recommendations
For Octopus Server versions 2018.8.3 and later, consider disabling the Web Request Proxy authentication until a fix is available to prevent the password from being shown in plaintext.
Found an issue in the description? Have something to add? Feel free to write us 👾