High severity7.5NVD Advisory· Published Aug 18, 2021· Updated Jun 17, 2026

CVE-2021-31820

Description

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.

Affected products

Octopus/Serverllm-fuzzy2 versions
>2018.8.2+ 1 more
- (no CPE)range: >2018.8.2
- (no CPE)range: 2018.8.2

Patches

Vulnerability mechanics

References

advisories.octopus.com/adv/2021-07---Proxy-Password-Stored-in-Plaintext-%28CVE-2021-31820%29.2193063986.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000