CVE-2018-10550

In Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against the list of tenants the user has access to...

CVE-2018-10550

CVE-2018-10550 affects Octopus Deploy prior to version 2018.4.7. The root cause is that target and tenant tag variable scopes were not checked against the list of tenants the user has access to, enabling a potential security restrictions bypass. The vulnerability is described in public CVE record...