CVE-2019-8944

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Feb 20, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-89456.1Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89466.1Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89476.1Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.CVE-2019-89489.8PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.CVE-2019-89509.8The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin acco CVE-2019-89516.1An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially CVE-2019-89526.5A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially CVE-2019-89536.1The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_lis CVE-2019-89548.8In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=CVE-2019-89557.5In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against To CVE-2019-89567.8In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when hand CVE-2019-89607.5A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The mess