CVE-2021-26556

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL…

published October 7, 2021

CVSS
—
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Published
2021-10-07T01:00Z
EPSS history
Timeline
  • 07 OCT 01:00Z
    When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL…
    cvelistv5