CVE-2024-12226

Name of the Vulnerable Software and Affected Versions Octopus Kubernetes worker or agent versions 1 through 2

Description In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This issue was identified in Version 2, but it was also determined that the issue could be achieved in Version 1.

Recommendations For versions 1 and 2, apply the fix that has been made to prevent sensitive variables from being written to the Kubernetes script pod log in clear-text. As a temporary workaround, consider restricting access to the Kubernetes script pod log to minimize the risk of exploitation.