Login Request a demo
TE
Product
Tentacle
by Octopus · last CVE Jan 19, 2022
4
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tentacle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-31822
7.8
0%
Nov 24
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured
Affected: 3.15.4 before 6.1.1116
CVE-2021-26557
7.8
0%
Oct 7
When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain…
Affected: 3.15.4 before 6.0.489
CVE-2019-15508
6.5
1%
Aug 23
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a…
Affected: 3.0.8 through 5.0.0
CVE-2021-31821
5.5
0%
Jan 19
When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext
Affected: before 6.1.1266
Showing 4