CVE-2022-2780 — Octopus Deploy / Octopus Server

Description (CNA)

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2021.2.994 before unspecified; affected unspecified before 2022.1.3180; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.7965; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.10586

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/post/2022/sa2022-20/

ADP enrichment

CVE

No English description supplied.

https://advisories.octopus.com/post/2022/sa2022-20/

CISA-ADP

No English description supplied.

No references supplied.