CVE-2018-12884

In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-06-26

Last modified

2024-09-16

Weaknesses

CWE-269

Affected products

• Octopus Deploy (Octopus)

References

• https://github.com/OctopusDeploy/Issues/issues/4674