CVE-2018-9039

In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their…

published March 27, 2018

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01009 · 62.5th percentile
Published
2018-03-27T03:00Z
EPSS history
Timeline
  • 27 MAR 03:00Z
    In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their…
    cvelistv5