VULNERABILITY INTELLIGENCE

CVE-2019-8944

CVSS score6.5 MEDIUM
EPSS probability1.55%
CISA KEVNot currently listed
Published2019-02-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references