CVE-2019-8944

—

CVSS 3.0

6.5 medium

EPSS

2%p74

Published

Feb 20, 2019 (Feb 20, 2019)

Modified

Jun 17, 2026

Description

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

Vendors: octopus
Products: octopus deploy, octopus server
Weakness: CWE-532
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.