CVE-2022-2781

Description

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables.

Affected Platforms

Weakness Type

CWE-327

References

• https://advisories.octopus.com/post/2022/sa2022-16/
• https://advisories.octopus.com/post/2022/sa2022-16/