Octopus Deploy@* Security Vulnerabilities and Issues — Octopus Deploy@* CVE List

Lucene search

OctopusOctopus Deploy*

2 matches found

CVE•added 2020/03/19 3:15 p.m.•44 views

CVE-2020-10678

In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges.

8.8CVSS8.6AI score0.00768EPSS

CVE•added 2020/04/28 7:15 a.m.•32 views

CVE-2020-12286

In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks scoped to any other tenant.

4.3CVSS4.6AI score0.0039EPSS