High WID-SEC-2022-2391 2 CVEs

Octopus Deploy: Mehrere Schwachstellen

Published Dec 21, 2022 · Updated Dec 21, 2022 · de-DE

Vendor: Octopus Deploy Product: Octopus Deploy Product: Octopus Deploy < 2022.2.8552 Product: Octopus Deploy < 2022.3.10750 Product: Octopus Deploy < 2022.4.8221 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Octopus Deploy ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

Octopus Deploy ist ein automatisierter Software-Bereitstellungs- und Release-Management-Server.

Vulnerabilities 2

High 7.5

CVE-2022-3460

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become …

Octopus Deploy Octopus Server

Jan 2, 2023
Medium 6.1

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to byp…

Octopus Deploy Octopus Server

Jan 3, 2023

Revision history

2022-12-21 #1
Initiale Fassung

References

Octopus Security Advisories vom 2022-12-21
https://advisories.octopus.com/post/2022/sa2022-26/
Octopus Security Advisories vom 2022-12-21
https://advisories.octopus.com/post/2022/sa2022-25/