PT-2023-12744 · Unknown · Octopus Deploy

·

CVE-2022-2416

·

Published

2023-08-02

·

Updated

2023-08-04

CVSS v3.1

5.5

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Octopus Deploy (affected versions not specified)
Description The issue allows a low-privileged guest user to craft a request that enables enumeration or reconnaissance of an environment.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-2416

Affected Products

Octopus Deploy