CVE-2021-31822

    Dashboard / Vulnerabilities / CVE-2021-31822

    CVE-2021-31822

    Published: 24 Nov 2021Last Modified: 10 Apr 2026

    Summary:

    Details: When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.

    References: https://advisories.octopus.com/adv/2021-11---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-31822%29.2283732993.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- fd9aeb49f65cf142eb28899520d9ed5c4246f6b2
    Fixed -b2ca1f32e6ff415a22f195e51ac6a01987f3907f

    Affected versions

    3.15.4
    3.15.5
    3.15.6
    3.15.7
    3.15.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-31822 | CVE-DB