Skip to content
CVE PROGRAM SOURCE RECORD2.6 Low

CVE-2024-7998

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Octopus

Description

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Octopus Deploy Octopus Server

Default version status: unaffected

  • 2022.4.8332 to < 2024.1.12931affected
  • 2024.1.437 to < 2024.1.12931affected
  • 2024.2.101 to < 2024.2.9313affected

References