Description
In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 0.9 – < unspecified, unspecified – < 2022.1.3264, 2022.2.6729 – < unspecified, unspecified – < 2022.2.8351, 2022.3.348 – < unspecified, unspecified – < 2022.3.10586, 2022.4.791 – < unspecified, unspecified – < 2022.4.2898 | unspecified |