CVE-2021-30183: High severity octopus deploy vulnerability
Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30183?
CVE-2021-30183 is rated as a high severity vulnerability due to the risk of sensitive information exposure.
How do I fix CVE-2021-30183?
To fix CVE-2021-30183, upgrade to Octopus Server version 2020.6.4848 or later, or version 2021.1.6960 or later.
Which versions of Octopus Server are affected by CVE-2021-30183?
CVE-2021-30183 affects multiple versions of Octopus Server from 2020.5.0 up to 2021.1.6959.
What information is compromised in CVE-2021-30183?
CVE-2021-30183 compromises sensitive information such as passwords by logging them in plaintext.
Is CVE-2021-30183 easy to exploit?
CVE-2021-30183 can be easily exploited if an attacker has access to the logs containing the plaintext passwords.