CVE-2020-16197

An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that is outside the scope of the deployment target. An authorised user can potentially use a certificate that they are not in scope to use. An authorised user is also able to obtain...

CVE-2020-16197

CVE-2020-16197 affects Octopus Deploy 3.4. An authorised user can configure a deployment target with an Account or Certificate outside the target’s scope and may use a certificate not in scope. The vulnerability also allows obtaining certificate metadata by associating a certificate with resource...

PT-2020-14797

Name of the Vulnerable Software and Affected Versions Octopus Deploy version 3.4 Description An issue was discovered where a deployment target can be configured with an Account or Certificate that is outside the scope of the deployment target. This allows an authorized user to potentially use a...