QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-3614

Back to search

CVE-2022-3614

Published: Jan 3, 2023

Modified: Apr 10, 2025

PUBLISHED

Description

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.

VendorProductVersions

Octopus Deploy

Octopus Server

affected
3.5.1 - < unspecified
affected
unspecified - < 2022.2.8552
affected
2022.3.348 - < unspecified
affected
unspecified - < 2022.3.10750
affected
2022.4.791 - < unspecified

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now