Nguyennb

**Name of the Vulnerable Software and Affected Versions** Octopus Server (affected versions not specified) **Description** An issue existed in Octopus Server where a new API key could be created from an existing access token. This allowed the new API key to have a longer lifetime than the original access token used to generate it. The `/api/v1/api-keys` endpoint was involved in this process. The vulnerable parameter was the access token used for minting the new API key. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.