CVE-2021-31822

2021-11-2400:35:09

Octopus

www.cve.org

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.

CNA Affected

[
  {
    "product": "Octopus Tentacle",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "3.15.4",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.1116",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]