CVE-2024-7998

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan

Low · published August 21, 2024

CVSS v3.1
2.6
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2024-08-21T05:30Z
EPSS history
Timeline
  • 21 AUG 05:30Z
    In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan
    cvelistv5