high7.5
CVE-2020-27155
An issue was discovered in Octopus Deploy through 2020.4.4.
Impact
An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Deploy | from 3.11.13 through 2020.4.4 |
References
- NVD record
- CVE.org record
- https://github.com/OctopusDeploy
- https://github.com/OctopusDeploy/Issues/issues/6637
- https://github.com/OctopusDeploy/Issues/issues/6639
- https://github.com/OctopusDeploy/Issues/issues/6640
- https://github.com/OctopusDeploy
- https://github.com/OctopusDeploy/Issues/issues/6637
- https://github.com/OctopusDeploy/Issues/issues/6639
- https://github.com/OctopusDeploy/Issues/issues/6640