← CVE Intelligence

CVE-2021-26556

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 0.9 before unspecified; affected unspecified before 2020.4.229; affected 2020.5.0 before unspecified; affected unspecified before 2020.5.256

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.