critical9.1
CVE-2022-2782
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
Impact
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | before 2022.2.8351 from 2022.3.0 before 2022.3.10586 from 2022.4.0 before 2022.4.2898 |