PT-2018-17101 · Octopus Deploy · Octopus Deploy

Distantcam · Publicado 2018-01-16 · Atualizado 2019-10-03 · CVE-2018-5706

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Octopus Deploy versions prior to 4.1.9

Description: An issue allows users with user editing permissions to modify teams and grant themselves Administer System permissions, even if they did not originally have these permissions. This can be achieved through the use of the RoleEdit or TeamEdit permission.

Recommendations: For versions prior to 4.1.9, update to version 4.1.9 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2018-5706

Produtos afetados

Octopus Deploy

Referências · 3

• https://github.com/OctopusDeploy/Issues/issues/4167 · Nota
• https://osv.dev/vulnerability/CVE-2018-5706 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5706 · Nota de Segurança