CVE-2019-14525: Medium severity octopus deploy vulnerability
Published Aug 5, 2019
·Updated
In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive values by visiting a server configuration page or making an API call.
Affected Software
2 affected components
Octopus Octopus Deploy>=2019.4.0<2019.6.6
Octopus Octopus Server>=2019.7.0<2019.7.6
Event History
Aug 5, 2019
CVE Published
via MITRE·11:22 AM
Data Sourced
via MITRE·11:22 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14525?
CVE-2019-14525 is rated as a medium severity vulnerability.
2
How do I fix CVE-2019-14525?
To fix CVE-2019-14525, upgrade Octopus Deploy to version 2019.6.6 or later, or version 2019.7.6 or later.
3
What impact does CVE-2019-14525 have on my system?
CVE-2019-14525 allows an authenticated system administrator to view sensitive values which may lead to information disclosure.
4
Which versions of Octopus Deploy are affected by CVE-2019-14525?
CVE-2019-14525 affects Octopus Deploy versions from 2019.4.0 to 2019.6.x before 2019.6.6 and 2019.7.x before 2019.7.6.
5
Who is affected by CVE-2019-14525?
Authenticated system administrators using vulnerable versions of Octopus Deploy are affected by CVE-2019-14525.