{"id":"CVE-2022-2721","aliases":["EUVD-2022-34963","GHSA-wxc6-2xqr-q2pg"],"status":"published","title":"In affected versions of Octopus Server it is possible for target discovery to print certain...","description":"In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00618,"percentile":0.49963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2022-11-25T00:00:00Z","modified":"2026-06-17T04:42:27Z","products":[{"vendor":"octopus","product":"octopus_server"},{"vendor":"octopus deploy","product":"octopus server"}],"references":[{"url":"https://advisories.octopus.com/post/2022/sa2022-24/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2721"},{"url":"https://advisories.octopus.com/post/2022/sa2022-24"},{"url":"https://github.com/advisories/GHSA-wxc6-2xqr-q2pg"}],"sources":{"cve":[{"id":"CVE-2022-2721","description":"In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.","status":"published","published":"2022-11-25T00:00:00Z","modified":"2025-04-25T17:32:15.673Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-34963","description":"In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.","status":"published","published":"2022-11-25T00:00:00Z","modified":"2025-04-25T17:32:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:02.967137Z"}],"ghsa":[{"id":"GHSA-wxc6-2xqr-q2pg","title":"In affected versions of Octopus Server it is possible for target discovery to print certain...","description":"In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.","status":"published","published":"2022-11-25T06:30:22Z","modified":"2025-04-25T18:32:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:02:02.261137Z"}],"nvd":[{"id":"CVE-2022-2721","description":"In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.","status":"published","published":"2022-11-25T05:15:12.373Z","modified":"2026-06-17T04:42:27.19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:32.827264Z"}]}}