Security Advisory

CVE-2017-17665

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-13 20:00:00

Last updated 2024-08-05 20:59:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access.

← Browse all CVEs View on cve.org ↗