CVE-2021-31822: High severity octopus tentacle vulnerability
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31822?
CVE-2021-31822 is considered to have a high severity due to the potential for local privilege escalation.
How do I fix CVE-2021-31822?
To fix CVE-2021-31822, ensure the systemd service file permissions for Octopus Tentacle are correctly configured to prevent unprivileged users from modifying the file.
Who is affected by CVE-2021-31822?
CVE-2021-31822 affects systems running Octopus Tentacle on Linux operating systems with misconfigured systemd service file permissions.
What can an attacker do with CVE-2021-31822?
An attacker exploiting CVE-2021-31822 could gain privileged access to the system by modifying the contents of the misconfigured systemd service file.
What versions of Octopus Tentacle are impacted by CVE-2021-31822?
CVE-2021-31822 impacts Octopus Tentacle versions between 3.15.4 and 6.1.1116.