Lucene search
HistoryAug 02, 2023 - 6:15 a.m.
CVE-2022-2416
octopus deploy
vulnerability
guest user
reconnaissance
cve-2022-2416
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment.
Affected configurations
Node
octopusoctopus_serverRange2019.4.0–2022.4.9997
ORoctopusoctopus_serverRange2023.1.4189–2023.1.10235
ORoctopusoctopus_serverRange2023.2.2028–2023.2.10545
Related
prion
prion
Design/Logic Flaw
2023-08-02 06:15:00
cvelist
cvelist
CVE-2022-2416
2023-08-02 05:26:10
cve
cve
CVE-2022-2416
2023-08-02 06:15:10
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
Related for NVD:CVE-2022-2416