Vulnerabilities (CVE)

Filtered by vendor Octopus Subscribe
Filtered by product Tentacle
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31822 2 Linux, Octopus 2 Linux Kernel, Tentacle 2021-11-29 4.6 MEDIUM 7.8 HIGH
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
CVE-2021-26557 1 Octopus 1 Tentacle 2021-10-15 4.4 MEDIUM 7.8 HIGH
When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.