CVE-2024-4226: It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and...
3.5
CVSS
Description
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed.
Classification
CVE ID: CVE-2024-4226
CVSS Base Severity: LOW
CVSS Base Score: 3.5
Affected Products
Vendor: Octopus Deploy
Product: Octopus Server
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)