CVE-2022-30532

published 2022-07-19

CVE-2022-30532: In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy.

Priority P4 25 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
octopus	octopus_server	>= 0.9 < 2021.3.13021	2021.3.13021
octopus	octopus_server	>= 2022.1.0 < 2022.1.2849	2022.1.2849
octopus	octopus_server	>= 2022.3.348 < 2022.3.2387	2022.3.2387
octopus_deploy	octopus_server	>= 0.9 < unspecified	unspecified
octopus_deploy	octopus_server	>= 2022.1.2121 < unspecified	unspecified
octopus_deploy	octopus_server	>= 2022.3.348 < unspecified	unspecified
octopus_deploy	octopus_server	>= unspecified < 2021.3.13021	2021.3.13021
octopus_deploy	octopus_server	>= unspecified < 2022.1.2849	2022.1.2849
octopus_deploy	octopus_server	>= unspecified < 2022.3.2387	2022.3.2387

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.