← All advisories

High severity7.5NVD Advisory· Published Apr 30, 2018· Updated Jun 17, 2026

CVE-2018-10550

CVE-2018-10550

Description

In Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against the list of tenants the user has access to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Octopus/Octopusdeployinferred3 versions
<2018.4.7+ 2 more
- (no CPE)range: <2018.4.7
- cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*range: <2018.4.7
- (no CPE)range: <2018.4.7

Patches

Vulnerability mechanics

References

1

github.com/OctopusDeploy/Issues/issues/4454nvdIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.