CVE-2024-7998

State: Published
Severity: 2.6 Low
Published: Aug 21, 2024
Updated: Dec 3, 2024
Reserved: Aug 19, 2024

Description

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan.

Scores

CVSS	Score	Vector	Source
3.1	2.6 Low	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N	Octopus

Weaknesses

CWE-613 Insufficient Session Expiration

Affected Products

Product	Versions
Octopus ServerOctopus Deploy	2022.4.8332 to before 2024.1.12931Affected 2024.1.437 to before 2024.1.12931Affected 2024.2.101 to before 2024.2.9313Affected

References

https://advisories.octopus.com/post/2024/sa2024-07/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.