CVE-2024-12226 — Octopus Deploy / Kubernetes Worker or Kubernetes Agent

CVE-2024-12226

Octopus Deploy / Kubernetes Worker or Kubernetes Agent PUBLISHED

Description (CNA)

In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Kubernetes Worker or Kubernetes Agent	affected 1.x before 1.19.0; affected 2.x before 2.8.0

CWE

CWE-532

References

https://advisories.octopus.com/post/2024/sa2024-10/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.