Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-2259 EUVD-2022-34534GHSA-x79p-xvfj-9wfq

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view …

Published Mar 13, 2023 · Updated Mar 3, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2019.1.0 – < unspecified, unspecified – < 2022.3.11098, 2022.4.791 – < unspecified, unspecified – < 2022.4.8463, 2023.1.4189 – < unspecified, unspecified – < 2023.1.9672 unspecified

Advisories 1

References