Back to search
CVE-2022-2782
Published: Oct 26, 2022
Modified: May 7, 2025
PUBLISHED
Description
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
| Vendor | Product | Versions |
|---|---|---|
Octopus Deploy | Octopus Server | affected 0.9 - < unspecifiedaffected unspecified - < 2022.2.8351affected 2022.3.348 - < unspecifiedaffected unspecified - < 2022.3.10586affected 2022.4.791 - < unspecified+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now