CVE-2020-25825: High severity octopus deploy vulnerability
Published Oct 12, 2020
·Updated
In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.
Affected Software
1 affected component
Octopus Octopus Deploy>=3.1.0<=2020.4.0
Event History
Oct 12, 2020
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-25825?
CVE-2020-25825 is considered to have a high severity due to its potential to expose sensitive information.
2
How do I fix CVE-2020-25825?
To resolve CVE-2020-25825, upgrade Octopus Deploy to a version later than 2020.4.0.
3
Which versions of Octopus Deploy are affected by CVE-2020-25825?
CVE-2020-25825 affects Octopus Deploy versions from 3.1.0 up to and including 2020.4.0.
4
What types of information can be exposed by CVE-2020-25825?
CVE-2020-25825 can allow certain scripts to reveal sensitive information through task logs.
5
Is there a workaround for CVE-2020-25825?
There is no officially documented workaround for CVE-2020-25825, so upgrading is recommended.