What’s Vulnerable › Vulnerabilities

CVE-2017-15609

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-19 · updated 2026-06-17
• Weakness: CWE-311

Description

Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.

Affected products

• Octopus Deploy: through 3.17.6

References

• https://github.com/OctopusDeploy/Issues/issues/3868
• https://github.com/OctopusDeploy/Issues/issues/3868

Get alerted when CVE-2017-15609 or the next vulnerability affects your stack