CVE-2022-2720

In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, sensitive value masking will only partially work...

PT-2022-18286 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises when a sensitive value is a substring of another value, causing sensitive value masking to only partially work. Recommendations: At the moment, there is no informati...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

Cross site request forgery (csrf)

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

Design/Logic Flaw

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

PT-2022-18618 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: A security issue was identified in Octopus Server where a session cookie could be used as the CSRF token. Recommendations: At the moment, there is no information about a newer versio...

CVE-2022-2781

CVE-2022-2781 involves Octopus Server where the same encryption process is used for both session cookies and variables. The core issue is a shared encryption mechanism between two different data types, exposing potential confidentiality concerns. The CVSS v3.1 metrics indicate Network access, Low...

CVE-2022-2783

CVE-2022-2783 affects Octopus Server. A session cookie can be used as a CSRF token, exposing CSRF risk (CVSS v3.1: 5.3, Network vector, Low integrity impact). Multiple sources (NVD, Red Hat, CVE CVE, CVE listing) corroborate; exploitation details are not provided in the connected documents. Red H...

Octopus Server 跨站请求伪造漏洞

Octopus Server is an automated deployment platform. A cross-site request forgery vulnerability exists in Octopus Server, which stems from the fact that its session cookie can be used as a cross-site request forgery token...

PT-2022-18604 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises from the use of the same encryption process for both session cookies and variables in affected versions of the software. Recommendations: At the moment, there is no...

CVE-2022-2783: Cross-Site Request Forgery (CSRF)

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

Octopus Server 加密问题漏洞

Octopus Server is an automated deployment platform. Octopus Server has a cryptographic issue vulnerability that stems from the fact that it uses the same encryption process for encrypting session cookies and variables...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2781: Use of a Broken or Risky Cryptographic Algorithm

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...