CVE-2023-4509 — Octopus Deploy / Octopus Server

CVE-2023-4509

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt.

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2018.9 before 2023.4.296; affected 2024.1 before 2024.1.437; affected 2024.2 before 2024.2.101

No CWE identifiers supplied.

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.