Vulnerability Details CVE-2019-15508
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 5.0.1. The fix was back-ported to 4.0.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 3.5
References
Products affected by CVE-2019-15508
-
cpe:2.3:a:octopus:server:2018.8.4
-
cpe:2.3:a:octopus:server:2019.7.0
-
cpe:2.3:a:octopus:server:2019.7.1
-
cpe:2.3:a:octopus:server:2019.7.2
-
cpe:2.3:a:octopus:server:2019.7.3
-
cpe:2.3:a:octopus:server:2019.7.5
-
cpe:2.3:a:octopus:server:2019.7.6
-
cpe:2.3:a:octopus:server:3.0.8
-
cpe:2.3:a:octopus:server:3.4.0
-
cpe:2.3:a:octopus:tentacle:3.0.8
-
cpe:2.3:a:octopus:tentacle:3.14.0
-
cpe:2.3:a:octopus:tentacle:3.14.1
-
cpe:2.3:a:octopus:tentacle:3.14.15
-
cpe:2.3:a:octopus:tentacle:3.14.159
-
cpe:2.3:a:octopus:tentacle:3.15.0
-
cpe:2.3:a:octopus:tentacle:3.15.1
-
cpe:2.3:a:octopus:tentacle:3.15.2
-
cpe:2.3:a:octopus:tentacle:3.15.3
-
cpe:2.3:a:octopus:tentacle:3.15.4
-
cpe:2.3:a:octopus:tentacle:3.15.5
-
cpe:2.3:a:octopus:tentacle:3.15.6
-
cpe:2.3:a:octopus:tentacle:3.15.7
-
cpe:2.3:a:octopus:tentacle:3.15.8
-
cpe:2.3:a:octopus:tentacle:3.16.0
-
cpe:2.3:a:octopus:tentacle:3.16.1
-
cpe:2.3:a:octopus:tentacle:3.16.2
-
cpe:2.3:a:octopus:tentacle:3.16.3
-
cpe:2.3:a:octopus:tentacle:3.16.4
-
cpe:2.3:a:octopus:tentacle:3.17.0
-
cpe:2.3:a:octopus:tentacle:3.18.0
-
cpe:2.3:a:octopus:tentacle:3.19.0
-
cpe:2.3:a:octopus:tentacle:3.19.1
-
cpe:2.3:a:octopus:tentacle:3.19.2
-
cpe:2.3:a:octopus:tentacle:3.20.0
-
cpe:2.3:a:octopus:tentacle:3.20.1
-
cpe:2.3:a:octopus:tentacle:3.21.0
-
cpe:2.3:a:octopus:tentacle:3.22.0
-
cpe:2.3:a:octopus:tentacle:3.22.1
-
cpe:2.3:a:octopus:tentacle:3.22.2
-
cpe:2.3:a:octopus:tentacle:3.23.0
-
cpe:2.3:a:octopus:tentacle:3.23.1
-
cpe:2.3:a:octopus:tentacle:3.23.2
-
cpe:2.3:a:octopus:tentacle:3.24.0
-
cpe:2.3:a:octopus:tentacle:3.25.0
-
cpe:2.3:a:octopus:tentacle:4.0.0
-
cpe:2.3:a:octopus:tentacle:4.0.1
-
cpe:2.3:a:octopus:tentacle:4.0.2
-
cpe:2.3:a:octopus:tentacle:4.0.3
-
cpe:2.3:a:octopus:tentacle:4.0.4
-
cpe:2.3:a:octopus:tentacle:4.0.5
-
cpe:2.3:a:octopus:tentacle:4.0.6
-
cpe:2.3:a:octopus:tentacle:4.0.7
-
cpe:2.3:a:octopus:tentacle:5.0.0