CVE-2024-7998

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

Score

CVSS 3.1 2.6 Low

Status

Analyzed - security@octopus.com

Published

2024-08-21

Last modified

2024-12-03

Weaknesses

CWE-613

Affected products

• Octopus Server (Octopus)
• Octopus Server (Octopus Deploy)

References

• https://advisories.octopus.com/post/2024/sa2024-07/