description: When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
problem types: Cleartext Storage of Sensitive Information (Windows)
affected:
{
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: unspecified, status: affected, version: 0.9, versionType: custom
lessThan: 2020.6.5146, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2021.1.7149, versionType: custom
lessThan: 2021.1.7316, status: affected, version: unspecified, versionType: custom
}