CVE-2024-12226CWE-532

In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text

Medium · published January 16, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-01-16T06:48Z
EPSS history
Timeline
  • 16 JAN 06:48Z
    In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text
    cvelistv5