CVE-2021-31819 — Octopus Deploy / Halibut

CVE-2021-31819

Octopus Deploy / Halibut PUBLISHED

Description (CNA)

In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Halibut	affected unspecified before 4.4.7

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/adv/2021-08---Remote-Code-Execution-via-Deserialisation-in-the-Halibut-Protocol-%28CVE-2021-31819%29.2250309681.html

ADP enrichment

CVE

No English description supplied.

https://advisories.octopus.com/adv/2021-08---Remote-Code-Execution-via-Deserialisation-in-the-Halibut-Protocol-%28CVE-2021-31819%29.2250309681.html