Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1670

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Octopus

Description

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Octopus Deploy Octopus Server

  • 0.9 to < unspecifiedaffected
  • unspecified to < 2021.3.12533affected
  • 2022.1.0 to < unspecifiedaffected
  • unspecified to < 2022.1.53affected

References