← CVE Intelligence

CVE-2022-1670

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 0.9 before unspecified; affected unspecified before 2021.3.12533; affected 2022.1.0 before unspecified; affected unspecified before 2022.1.53

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.