SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-2780

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.

HIGH 8.1EPSS 0.54%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.

CVSS 3.1
8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.54% probability · 44th percentile
CISA KEV
Not listed
Weakness
CWE-294
Affected
octopus/octopus server
Source
security@octopus.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.