Code injection

2021-11-2416:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.

CPENameOperatorVersion
tentaclege3.15.4
tentaclelt6.1.1116

CPE	Name	Operator	Version
	tentacle	ge	3.15.4
	tentacle	lt	6.1.1116

References

advisories.octopus.com/adv/2021-11---Local-privilege-escalation-in-Octopus-Tentacle-(CVE-2021-31822).2283732993.html