CVE-2024-6972

Summary

CVE-2024-6972 is a newly disclosed vulnerability affecting Octopus Server. Under specific conditions, this issue permits the printing of sensitive variables in clear-text within the task log. An attacker with access to the server's logs could potentially obtain and misuse this information for malicious purposes. Octopus Deploy has released a patch to mitigate this vulnerability. Users are strongly encouraged to apply the patch promptly to protect their systems from potential unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.