CVE-2020-26161

概要

参考情報

• github.com/OctopusDeploy · Third Party Advisory
• OctopusDeploy/Issues · Issue Tracking
• OctopusDeploy/Issues · Issue Tracking

octopus deploy のその他の脆弱性

• CVE-2023-2247中 5.3In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
• CVE-2022-2013高 7.5In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new …
• CVE-2022-23184中 6.1In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redi…
• CVE-2021-26556高 7.8When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user us…
• CVE-2020-27155高 7.5An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to prese…