← CVE Intelligence

CVE-2024-4226

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 2022.2.5205 before 2022.2.7934; affected 2022.3.348 before 2022.3.9163

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.