Security Advisory

CVE-2022-2572

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-01 00:00:00

Last updated 2025-05-06 03:37:49

Assigner Octopus

CVSS score not scored

State PUBLISHED

Description

In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked.

← Browse all CVEs View on cve.org ↗