Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks scoped to any other tenant.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Octopus Deploy 信息泄露漏洞
Vulnerability Description
Octopus Deploy是澳大利亚Octopus Deploy公司的一款用于.NET、Java等应用程序开发部署的自动化工具。 Octopus Deploy 2019.12.9之前版本和2020.1.12之前版本中存在安全漏洞。攻击者可利用该漏洞查看只有其他租户有权查看的服务器任务。
CVSS Information
N/A
Vulnerability Type
N/A