← back
CVE-2020-27155

CVE-2020-27155

EPSS 1.3%
An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/OctopusDeployhttps://github.com/OctopusDeploy/Issues/issues/6637https://github.com/OctopusDeploy/Issues/issues/6639https://github.com/OctopusDeploy/Issues/issues/6640