CVE-2022-2572
Assigner: Octopus
Published: 2022-11-01T00:00:00
State: PUBLISHED
descriptions: value: In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked.
affected: vendor: Octopus Deploy
product: Octopus Server
versions: version: 3.5
status: affected
lessThan: unspecified
versionType: custom
version: unspecified
lessThan: 2022.1.3264
status: affected
versionType: custom
version: 2022.2.6729
status: affected
lessThan: unspecified
versionType: custom
version: unspecified
lessThan: 2022.2.8277
status: affected
versionType: custom
version: 2022.3.348
status: affected
lessThan: unspecified
versionType: custom
version: unspecified
lessThan: 2022.3.10586
status: affected
versionType: custom
version: 2022.4.791
status: affected
lessThan: unspecified
versionType: custom
version: unspecified
lessThan: 2022.4.2898
status: affected
versionType: custom
problemTypes: descriptions: type: text
description: Broken Access Control