Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2019-8944

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

  • Published: Feb 20, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-8944
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
octopus / octopus_deploy 2018.10.3 2018.10.3.x
octopus / octopus_deploy 2018.10.2 2018.10.2.x
octopus / octopus_deploy 2018.10.1 2018.10.1.x
octopus / octopus_deploy 2018.10.0 2018.10.0.x
octopus / octopus_deploy - 2018.9.17.x
octopus / octopus_server 2018.11.0 2019.1.8