Skip to content
OpenAdvisories
Unscored CVE-2022-2781 EUVD-2022-35022GHSA-xppm-x368-2qjm

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and …

Published Oct 6, 2022 · Updated Aug 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 3.2.10 – < unspecified, unspecified – < 2022.1.3154, 2022.2.6729 – < unspecified, unspecified – < 2022.2.7897, 2022.3.348 – < unspecified, unspecified – < 2022.3.10586 unspecified

References