Vulnerability Details CVE-2022-2721
In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.5%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-2721
-
cpe:2.3:a:octopus:octopus_server:2022.2.6729
-
cpe:2.3:a:octopus:octopus_server:2022.2.6764
-
cpe:2.3:a:octopus:octopus_server:2022.2.6832
-
cpe:2.3:a:octopus:octopus_server:2022.2.6849
-
cpe:2.3:a:octopus:octopus_server:2022.2.6872
-
cpe:2.3:a:octopus:octopus_server:2022.2.6895
-
cpe:2.3:a:octopus:octopus_server:2022.2.6971
-
cpe:2.3:a:octopus:octopus_server:2022.2.7718
-
cpe:2.3:a:octopus:octopus_server:2022.2.7897
-
cpe:2.3:a:octopus:octopus_server:2022.2.7934
-
cpe:2.3:a:octopus:octopus_server:2022.3.1455
-
cpe:2.3:a:octopus:octopus_server:2022.3.1591
-
cpe:2.3:a:octopus:octopus_server:2022.3.2140
-
cpe:2.3:a:octopus:octopus_server:2022.3.2387
-
cpe:2.3:a:octopus:octopus_server:2022.3.2616
-
cpe:2.3:a:octopus:octopus_server:2022.3.348
-
cpe:2.3:a:octopus:octopus_server:2022.3.4953
-
cpe:2.3:a:octopus:octopus_server:2022.3.5512
-
cpe:2.3:a:octopus:octopus_server:2022.3.7274
-
cpe:2.3:a:octopus:octopus_server:2022.3.7782