In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.
References
Link | Resource |
---|---|
https://advisories.octopus.com/post/2022/sa2022-20/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Octopus
Published: 2022-10-14T00:00:00
Updated: 2022-10-14T00:00:00
Reserved: 2022-08-11T00:00:00
Link: CVE-2022-2780
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-10-14T07:15:08.947
Modified: 2022-10-19T14:36:45.370
Link: CVE-2022-2780
JSON object: View
Redhat Information
No data.
CWE