Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server that stems from the fact that sensitive value masking will only partially work when the sensitive value is a substring of another value in the affected Octopus Server The following products and...

CVE-2022-2720: Exposure of Private Personal Information to an Unauthorized Actor

In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, sensitive value masking will only partially work...

PT-2022-18286 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises when a sensitive value is a substring of another value, causing sensitive value masking to only partially work. Recommendations: At the moment, there is no informati...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

Cross site request forgery (csrf)

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

Design/Logic Flaw

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

PT-2022-18618 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: A security issue was identified in Octopus Server where a session cookie could be used as the CSRF token. Recommendations: At the moment, there is no information about a newer versio...

CVE-2022-2781

CVE-2022-2781 involves Octopus Server where the same encryption process is used for both session cookies and variables. The core issue is a shared encryption mechanism between two different data types, exposing potential confidentiality concerns. The CVSS v3.1 metrics indicate Network access, Low...

CVE-2022-2781

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token...

Octopus Server 加密问题漏洞

Octopus Server is an automated deployment platform. Octopus Server has a cryptographic issue vulnerability that stems from the fact that it uses the same encryption process for encrypting session cookies and variables...

Octopus Server 跨站请求伪造漏洞

Octopus Server is an automated deployment platform. A cross-site request forgery vulnerability exists in Octopus Server, which stems from the fact that its session cookie can be used as a cross-site request forgery token...

CVE-2022-2783

CVE-2022-2783 affects Octopus Server. A session cookie can be used as a CSRF token, exposing CSRF risk (CVSS v3.1: 5.3, Network vector, Low integrity impact). Multiple sources (NVD, Red Hat, CVE CVE, CVE listing) corroborate; exploitation details are not provided in the connected documents. Red H...

CVE-2022-2781: Use of a Broken or Risky Cryptographic Algorithm

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...

PT-2022-18604 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises from the use of the same encryption process for both session cookies and variables in affected versions of the software. Recommendations: At the moment, there is no...