CVEvulnerability

CVE-2022-2760

4.3 MEDIUM Published 2022-09-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-209

Description

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space.

Affected configurations

• octopus octopus server (>= 2019.5.7 < 2022.1.3180) • octopus octopus server (>= 2022.2.0 < 2022.2.7965) • octopus octopus server (>= 2022.3.0 < 2022.3.10405)

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References