Local Privilege Escalation Vulnerability in Octopus Tentacle by Octopus Deploy
CVE-2021-26557

7.8HIGH

Key Information:

Vendor

Octopus Deploy

Status
Octopus Tentacle
Vendor
CVE Published:
7 October 2021

What is CVE-2021-26557?

A local privilege escalation vulnerability exists in Octopus Tentacle when installed in a custom directory. Due to improper folder ACLs, an unprivileged user can take advantage of DLL side-loading techniques to escalate their privileges, potentially allowing unauthorized access and control over the system. It's crucial for users and administrators to review installation settings and adjust permissions accordingly to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Octopus Tentacle 3.15.4

Octopus Tentacle < 6.0.489

References

https://advisories.octopus.com/adv/2021-02---Local-privil...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.