CVE-2019-15698

4.3 mediumEPSS 0.9%

Medium (4.3) in octopus octopus server. EPSS 0.9% chance of exploitation in the next 30 days.

In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
Published: 2019-08-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

octopus:octopus_server

References

https://github.com/OctopusDeploy/Issues/issues/5810
https://github.com/OctopusDeploy/Issues/issues/5810

Check your stack JSON