description: In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
problem types: Variable preview can unmask secrets
affected:
{
defaultStatus: unaffected
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: unspecified, status: affected, version: 2018.3.0, versionType: custom
lessThan: 2022.3.10929, status: affected, version: unspecified, versionType: custom
lessThan: 2022.4.791, status: affected, version: unspecified, versionType: custom
lessThan: 2022.4.8319, status: affected, version: unspecified, versionType: custom
}