CVE-2018-12884: Medium severity octopus deploy vulnerability
Published Jun 26, 2018
·Updated
In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.
Affected Software
1 affected component
Octopus Octopus Deploy=3.0
Event History
Jun 26, 2018
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12884?
CVE-2018-12884 is rated as medium severity due to the potential for unauthorized account creation.
2
How do I fix CVE-2018-12884?
To fix CVE-2018-12884, upgrade Octopus Deploy to version 2018.6.7 or later.
3
Who is affected by CVE-2018-12884?
CVE-2018-12884 affects authenticated users of Octopus Deploy versions 3.0 to 2018.6.6 who have incorrect permissions.
4
What can be exploited in CVE-2018-12884?
CVE-2018-12884 can be exploited to allow users with insufficient permissions to create unauthorized accounts.
5
Is there a workaround for CVE-2018-12884?
There are no documented workarounds for CVE-2018-12884; the recommended action is to upgrade to a secure version.