CVE Daily

CVE-2022-3614

In affected versions of Octopus Deploy users of certain browsers using AD to sig...

Medium CVSS 6.1

Overview

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.

CWE: CWE-601 Published: 2023-01-03T02:15:16.620
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.1 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags