PT-2023-15886 · Unknown · Octopus Deploy

Alicanact60 · Publicado 2023-05-18 · Atualizado 2025-01-21 · CVE-2022-4870

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Octopus Deploy (affected versions not specified)

Description The issue allows discovery of network details via error messages in affected versions of the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2022-4870

Produtos afetados

Octopus Deploy

Referências · 4

• https://t.me/cvenotify/108139 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-4870 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-4870 · Aviso do Fabricante
• https://advisories.octopus.com/post/2023/sa2023-09 · Aviso do Fabricante