Insecure Permission Handling in Octopus Deploy

CVE-2022-2258

What is CVE-2022-2258?

In specific versions of Octopus Deploy, a vulnerability exists where users can access Tagsets without the proper permissions. This flaw compromises the security model of the software, enabling unauthorized users to view potentially sensitive information that is meant to be restricted. Organizations using affected versions should prioritize updating their software to mitigate this issue and protect against unauthorized data exposure.

References