CVE-2022-2760

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a…

Medium · published September 28, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Published
2022-09-28T00:00Z
EPSS history
Timeline
  • 28 SEP 00:00Z
    In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a…
    cvelistv5