CVE-2017-15609

N/A

Descricao

Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado10/19/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

octopus:octopus_deploy

Fraquezas (CWE)

CWE-311

Referencias

https://github.com/OctopusDeploy/Issues/issues/3868(cve@mitre.org)

https://github.com/OctopusDeploy/Issues/issues/3868(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.