NTLM Relay Attack Vulnerability in Octopus Server by Octopus Deploy

CVE-2022-2780

What is CVE-2022-2780?

In certain versions of Octopus Server, the Git Connectivity test function within the VCS project can be manipulated to execute an SMB request. This opens up the potential for an NTLM relay attack, which could compromise system integrity and expose sensitive information. Users are advised to review their configurations and apply the necessary updates to mitigate risks associated with this vulnerability.

References