CVE-2019-14268

In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3. The fix was back-ported to LTS 2019.6.5 as well as LTS 2019.3.7.

• CWE-532

• https://github.com/OctopusDeploy/Issues/issues/5739Third Party Advisory
• https://github.com/OctopusDeploy/Issues/issues/5739Third Party Advisory

Published

Jul 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1426A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-14260On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition De…
• CVE-2019-14261An issue was discovered on ABUS Secvest FUAA50000 3.01.01 de…
• CVE-2019-14262MetadataExtractor 2.1.0 allows stack consumption.
• CVE-2019-14266OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/uce…
• CVE-2019-14267PDFResurrect 0.15 has a buffer overflow via a crafted PDF fi…7.8
• CVE-2019-1427A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-14270Comodo Antivirus through 12.0.0.6870, Comodo Firewall throug…
• CVE-2019-14271In Docker 19.03.x before 19.03.1 linked against the GNU C Li…9.8
• CVE-2019-14272In SilverStripe asset-admin 4.0, there is XSS in file titles…5.4
• CVE-2019-14273In SilverStripe assets 4.0, there is broken access control o…5.3
• CVE-2019-14274MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() …5.5