CVE-2022-3460: High severity octopus deploy vulnerability
In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3460?
CVE-2022-3460 is a vulnerability in Octopus Deploy that allows certain types of sensitive variables to become unmasked when viewed in variable preview.
How does CVE-2022-3460 affect Octopus Deploy?
CVE-2022-3460 affects certain versions of Octopus Deploy where sensitive variables can inadvertently become unmasked in the variable preview.
What is the severity of CVE-2022-3460?
CVE-2022-3460 has a severity rating of 7.5, which is considered high.
What versions of Octopus Deploy are affected by CVE-2022-3460?
CVE-2022-3460 affects versions of Octopus Deploy between 2018.1.0 and 2022.3.10750, as well as versions between 2022.4 and 2022.4.8063.
How can I fix CVE-2022-3460?
To fix CVE-2022-3460, it is recommended to upgrade Octopus Deploy to a version higher than 2022.4.8063 or 2022.3.10750, depending on the affected version range.