IT

Tracker / CVE-2024-6972

CVE-2024-6972

Medium 6.5

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text.

Affected products and versions

octopus octopus_server · 2024.1.437 → 2024.1.12759
octopus octopus_server · 2024.2.101 → 2024.2.9193

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References