CVE-2021-31816: High severity octopus deploy vulnerability
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-31816?
CVE-2021-31816 is a vulnerability that occurs when configuring Octopus Server with an external SQL database, where the database password is written to the log file in plaintext.
How does CVE-2021-31816 affect Octopus Server?
CVE-2021-31816 affects Octopus Server versions up to 2021.1.7316, when it is configured with an external SQL database.
How severe is CVE-2021-31816?
CVE-2021-31816 has a severity rating of 7.5, which is classified as high.
What is the Common Weakness Enumeration (CWE) for CVE-2021-31816?
The Common Weakness Enumeration (CWE) for CVE-2021-31816 is CWE-312.
How can I fix CVE-2021-31816?
To fix CVE-2021-31816, it is recommended to upgrade Octopus Server to a version higher than 2021.1.7316 or apply the necessary security patches provided by the vendor.