CVE-2022-2013
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.
Affected (1)
Products: Octopus: Octopus Deploy
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022.1.1495 to 2022.1.2647 |
| Running on/with | Platform Versions |
|---|---|
Linux Linux Kernel | All versions |
Microsoft Windows | All versions |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.