| |
Vulnerability CVE-2022-2572
Published: 2022-11-01
| Description: |
In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked. |
References: |
https://advisories.octopus.com/post/2022/sa2022-23/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
