NetSight
medium5.3

CVE-2022-2508

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose erro…

Impact

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging.

Affected products

VendorProductAffected versions
OctopusOctopus Server
before 2022.1.3264
from 2022.2.0 before 2022.2.8351
from 2022.3.0 before 2022.3.10586
from 2022.4.0 before 2022.4.2898

Weakness classification

References