CVE-2021-26556

概要

参考情報

• advisories.octopus.com/adv/2021-01---Local-privilege-escalation-in-Octopus-Server-%28CVE-2021-26556%29.1733296189.html

octopus deploy のその他の脆弱性

• CVE-2023-2247中 5.3In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
• CVE-2022-2013高 7.5In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new …
• CVE-2022-23184中 6.1In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redi…
• CVE-2020-26161中 6.1In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.
• CVE-2020-27155高 7.5An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to prese…