CVE-2018-4862

In Octopus Deploy versions 3.2.11 - 4.1.5 fixed in 4.1.6, an authenticated user with ProcessEdit permission could reference an Azure account in such a way as to bypass the scoping restrictions, resulting in a potential escalation of privileges...

PT-2018-16579

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions 3.2.11 through 4.1.5 Description The issue allows an authenticated user with ProcessEdit permission to bypass scoping restrictions by referencing an Azure account in a specific way, potentially leading to an escalation ...