CVE-2022-2760 — Octopus Deploy / Octopus Server

Description (CNA)

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2019.5.7 before unspecified; affected unspecified before 2022.1.3180; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.7965; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.10586

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/post/2022/sa2022-14/

ADP enrichment

CVE

No English description supplied.

https://advisories.octopus.com/post/2022/sa2022-14/

CISA-ADP

No English description supplied.

No references supplied.