CVE-2018-5706

An issue was discovered in Octopus Deploy before 4.1.9

published January 16, 2018

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

An issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions can modify teams to give themselves Administer System permissions even if they didn't have them, as demonstrated by use of the RoleEdit or TeamEdit permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01002 · 62.3th percentile
Published
2018-01-16T10:00Z
EPSS history
Timeline
  • 16 JAN 10:00Z
    An issue was discovered in Octopus Deploy before 4.1.9
    cvelistv5