cvedb.io
CVE-2018-11320
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-05-21T14:29:00.310 · Last modified 2026-06-17T01:35:42.877

Summary

In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs.

Affected products

octopus — octopus_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when octopus ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.