CVE-2021-31817 — Octopus Deploy / Octopus Server

Description (CNA)

When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2020.6.4671 before unspecified; affected unspecified before 2020.6.5146; affected 2021.1.7149 before unspecified; affected unspecified before 2021.1.7316

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/adv/2021-06---Cleartext-Storage-of-Sensitive-Information-%28CVE-2021-31817%29.2121138201.html

ADP enrichment

CVE

No English description supplied.

https://advisories.octopus.com/adv/2021-06---Cleartext-Storage-of-Sensitive-Information-%28CVE-2021-31817%29.2121138201.html