CVE-2022-2508

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging.

Score

CVSS 3.1 5.3 Medium

Status

Modified - security@octopus.com

Published

2022-10-27

Last modified

2025-05-07

Weaknesses

CWE-209

Affected products

• Octopus Server (Octopus)
• Octopus Server (Octopus Deploy)

References

• https://advisories.octopus.com/post/2022/sa2022-22/