high7.8
CVE-2021-31822
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured.
Impact
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Tentacle | from 3.15.4 before 6.1.1116 |