CVE-2021-31817

CVE-2021-31817: vulnerability in Octopus Server

Published · Updated

Follow this CVE+ Monitor Octopus Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
Affected products
Octopus Deploy · Octopus Server
Related CVEs — Octopus Server

In the same product, most dangerous first.

CVE-2022-2883HIGHCVE-2022-2883EPSS 1.0%CVE-2022-2572CRITICALCVE-2022-2572EPSS 1.0%CVE-2022-2013—CVE-2022-2013EPSS 0.9%CVE-2022-2074—CVE-2022-2074EPSS 0.9%CVE-2021-31816—CVE-2021-31816EPSS 0.9%CVE-2022-2778CRITICALCVE-2022-2778EPSS 0.9%