Vulnerabilities > CVE-2022-2782 - Insufficient Session Expiration vulnerability in Octopus Server

047910
CVSS 9.1 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
octopus
CWE-613
critical

Summary

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.

Vulnerable Configurations

Part Description Count
Application
Octopus
857

Common Weakness Enumeration (CWE)