PT-2020-16643
CVE-2020-27155
·
تاريخ النشر
2020-10-22
·
تاريخ التحديث
2020-10-30
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Octopus Deploy versions through 2020.4.4
Description
An issue was discovered that may allow an untrusted tentacle host to present itself as a trusted one if the websocket endpoint is enabled.
Recommendations
For versions through 2020.4.4, consider disabling the websocket endpoint as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾