CVE-2021-26556
Assigner: Octopus
Published: 2021-10-07T01:00:12
State: PUBLISHED
affected: product: Octopus Server
vendor: Octopus Deploy
versions: lessThan: unspecified
status: affected
version: 0.9
versionType: custom
lessThan: 2020.4.229
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: affected
version: 2020.5.0
versionType: custom
lessThan: 2020.5.256
status: affected
version: unspecified
versionType: custom
descriptions: value: When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
problemTypes: descriptions: description: Local privilege escalation in Octopus Server (Windows)
type: text