Anjelikasah

**Name of the Vulnerable Software and Affected Versions** Octopus Deploy (affected versions not specified) **Description** The issue allows a user to view Tagsets without having explicit permissions to do so. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Octopus Deploy (affected versions not specified) **Description** The issue allows a user to view Workerpools without having explicit permissions to do so. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Octopus Server (affected versions not specified) **Description** The issue allows revealing information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.