| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-16197 | 4.0 | An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that is outside the scope of the deployment target. An authorised user can potentially use a certificate that they are not in scope to | 2022-07-27 17:07:00 | 2020-08-25 19:15:00 |
| CVE-2019-15698 | 4.0 | In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10. | 2022-07-27 16:58:00 | 2019-08-27 17:15:00 |
| CVE-2019-14525 | 4.0 | In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive values by visiting a server configuration page or making an API call. | 2022-07-27 16:58:00 | 2019-08-05 12:15:00 |
| CVE-2022-23184 | 5.8 | In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects. | 2022-07-27 16:57:00 | 2022-02-07 03:15:00 |
| CVE-2019-11632 | 5.5 | In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewUnscoped or VariableEditUnscoped permission scoped to a specific project could view or edit unscoped variables from a different proj | 2022-07-27 16:44:00 | 2019-05-01 14:29:00 |
| CVE-2019-8944 | 4.0 | An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files. | 2022-07-27 16:42:00 | 2019-02-20 03:29:00 |
| CVE-2018-18850 | 9.0 | In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, runn | 2022-07-27 16:40:00 | 2018-10-31 03:29:00 |
| CVE-2020-14836 | 6.8 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot | 2022-07-27 16:07:00 | 2020-10-21 15:15:00 |
| CVE-2020-14830 | 6.8 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot | 2022-07-27 16:07:00 | 2020-10-21 15:15:00 |
| CVE-2018-12089 | 3.5 | In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed w | 2022-07-27 15:40:00 | 2018-06-11 10:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: