Skip to content
OpenAdvisories
Unscored CVE-2021-26556 EUVD-2021-13355GHSA-cpf5-2wrr-hcvc

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user u…

Published Oct 7, 2021 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 0.9 – < unspecified, unspecified – < 2020.4.229, 2020.5.0 – < unspecified, unspecified – < 2020.5.256 unspecified

References