medium5.3
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables.
Impact
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 3.2.10 before 2022.1.3154 from 2022.2.6729 before 2022.2.7897 from 2022.3.348 before 2022.3.10586 |