CVE-2019-15508

In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 5.0.1. The fix was back-ported to 4.0.7.

• CWE-312
• CWE-532

• https://github.com/OctopusDeploy/Issues/issues/5750Issue Tracking, Third Party Advisory
• https://github.com/OctopusDeploy/Issues/issues/5750Issue Tracking, Third Party Advisory

Published

Aug 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15502The TeamSpeak client before 3.3.2 allows remote servers to t…
• CVE-2019-15503cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka…
• CVE-2019-15504drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel t…9.8
• CVE-2019-15505drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kern…9.8
• CVE-2019-15506An issue was discovered in Kaseya Virtual System Administrat…
• CVE-2019-15507In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web …
• CVE-2019-1551There is an overflow bug in the x64_64 Montgomery squaring p…5.3
• CVE-2019-15510ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop…6.1
• CVE-2019-15511An exploitable local privilege escalation vulnerability exis…7.8
• CVE-2019-15513An issue was discovered in OpenWrt libuci (aka Library for t…
• CVE-2019-15514The Privacy > Phone Number feature in the Telegram app 5.10 …
• CVE-2019-15515Discourse 2.3.2 sends the CSRF token in the query string.