CVE-2018-5706

An issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions can modify teams to give themselves Administer System permissions even if they didn't have them, as demonstrated by use of the RoleEdit or TeamEdit permission.

• CWE-269

• https://github.com/OctopusDeploy/Issues/issues/4167Issue Tracking, Mitigation, Third Party Advisory
• https://github.com/OctopusDeploy/Issues/issues/4167Issue Tracking, Mitigation, Third Party Advisory

Published

Jan 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5700Winmail Server through 6.2 allows remote code execution by a…
• CVE-2018-5701In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, t…
• CVE-2018-5702Transmission through 2.92 relies on X-Transmission-Session-I…
• CVE-2018-5703The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in …9.8
• CVE-2018-5704Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attemp…
• CVE-2018-5705Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The …
• CVE-2018-5708An issue was discovered on D-Link DIR-601 B1 2.02NA devices.…
• CVE-2018-5709An issue was discovered in MIT Kerberos 5 (aka krb5) through…
• CVE-2018-5710An issue was discovered in MIT Kerberos 5 (aka krb5) through…
• CVE-2018-5711gd_gif_in.c in the GD Graphics Library (aka libgd), as used …
• CVE-2018-5712An issue was discovered in PHP before 5.6.33, 7.0.x before 7…
• CVE-2018-5713In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.…