Lucene search

K
cve[email protected]CVE-2022-30532
HistoryJul 19, 2022 - 7:15 a.m.

CVE-2022-30532

2022-07-1907:15:07
web.nvd.nist.gov
33
6
octopus deploy
cve-2022-30532
artifact logging
nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy.

Affected configurations

NVD
Node
octopusoctopus_serverRange0.92021.3.13021
OR
octopusoctopus_serverRange2022.1.02022.1.2849
OR
octopusoctopus_serverRange2022.3.3482022.3.2387
AND
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

CNA Affected

[
  {
    "product": "Octopus Server",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0.9",
        "versionType": "custom"
      },
      {
        "lessThan": "2021.3.13021",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.1.2121",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.1.2849",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.3.348",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.3.2387",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

Related for CVE-2022-30532