CVE-2021-26557 — Octopus Deploy / Octopus Tentacle

CVE-2021-26557

Octopus Deploy / Octopus Tentacle PUBLISHED

Description (CNA)

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Tentacle	affected 3.15.4 before unspecified; affected unspecified before 6.0.489

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/adv/2021-02---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-26557%29.1732870264.html

ADP enrichment

CVE

No English description supplied.

https://advisories.octopus.com/adv/2021-02---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-26557%29.1732870264.html