CVE-2017-15609

CVE-2017-15609 describes a vulnerability in Octopus Deploy versions prior to 3.17.7, where sensitive cleartext information can be exposed from a variable JSON file under specific Offline Drop Target configurations. This high-severity vulnerability (CVSS 7.5) has a network attack vector and low attack complexity, allowing unauthorized disclosure of confidential data without user interaction. While the vulnerability is not listed in CISA's KEV catalog and lacks publicly available exploit code or significant community discussion, its potential for sensitive information exposure warrants attention.