CVE-2023-1904

In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server

Medium · published December 14, 2023

CVSS v3.1
4.2
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Published
2023-12-14T07:23Z
EPSS history
Timeline
  • 14 DEC 07:23Z
    In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server
    cvelistv5