← CVE Intelligence

CVE-2022-2781

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 3.2.10 before unspecified; affected unspecified before 2022.1.3154; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.7897; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.10586

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.