Skip to content
OpenAdvisories
Low · 2.6 CVE-2024-7998 EUVD-2024-48826GHSA-3xmv-hrq3-4vc5

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifes…

Published Aug 21, 2024 · Updated Dec 3, 2024 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2022.4.8332 – < 2024.1.12931, 2024.1.437 – < 2024.1.12931, 2024.2.101 – < 2024.2.9313 2024.1.12931

Advisories 1

References