CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was re…
Published: 2024-04-30 · CVSS: 3.5 · CVSS 3.1
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7