CVE-2022-2780
First published: Fri Oct 14 2022(Updated: )
In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.
Credit: security@octopus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Octopus Octopus Server | >=2021.2.994<2022.1.3180 | |
| Octopus Octopus Server | >=2022.2.6729<2022.2.7965 | |
| Octopus Octopus Server | >=2022.3.348<2022.3.10586 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/octopus
- canonical/octopus octopus server
- version/octopus octopus server/2021.2.994
- version/octopus octopus server/2022.2.6729
- version/octopus octopus server/2022.3.348