CVE-2020-12286

CVE-2020-12286 describes an information-disclosure vulnerability in Octopus Deploy where the TaskView permission is not scoped to any dimension. In versions before 2019.12.9 and before 2020.1.12, a user scoped to a single tenant could view server tasks for other tenants, indicating a missing scop...