CVE-2022-2828
In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerability
| Software | From | Fixed in |
|---|---|---|
| octopus / octopus_server | 2022.3.0 | 2022.3.10586.x |
| octopus / octopus_server | 2022.2.0 | 2022.2.7897.x |
| octopus / octopus_server | 2022.1.2121 | 2022.1.3135.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime