Argoproj

Argo Cd

58 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2022-29165

  • EPSS 2.01%
  • Veröffentlicht 20.05.2022 15:15:10
  • Zuletzt bearbeitet 21.11.2024 06:58:37

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with version 1.4.0 and prior to versions 2.1.15, 2.2.9, and 2.3.4 which would allow unauthenticated users to im...

4.3

CVE-2022-24904

  • EPSS 1.11%
  • Veröffentlicht 20.05.2022 14:15:09
  • Zuletzt bearbeitet 21.11.2024 06:51:21

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write acce...

4.3

CVE-2022-24905

  • EPSS 1.25%
  • Veröffentlicht 20.05.2022 14:15:09
  • Zuletzt bearbeitet 21.11.2024 06:51:21

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is...

8.8

CVE-2022-24768

  • EPSS 1.25%
  • Veröffentlicht 23.03.2022 22:15:13
  • Zuletzt bearbeitet 21.11.2024 06:51:03

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to ad...

4.9

CVE-2022-24731

  • EPSS 0.96%
  • Veröffentlicht 23.03.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 06:50:58

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.5.0 but before versions 2.1.11, 2.2.6, and 2.3.0 is vulnerable to a path traversal vulnerability, allowing a malicious user with read/write acce...

6.5

CVE-2022-24730

  • EPSS 0.9%
  • Veröffentlicht 23.03.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 06:50:58

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before versions 2.1.11, 2.2.6, and 2.3.0 is vulnerable to a path traversal bug, compounded by an improper access control bug, allowing a...

6.5

CVE-2021-3557

  • EPSS 0.76%
  • Veröffentlicht 16.02.2022 17:15:11
  • Zuletzt bearbeitet 21.11.2024 06:21:50

A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which mig...

7.7

CVE-2022-24348

Exploit
  • EPSS 2.69%
  • Veröffentlicht 04.02.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 06:50:13

Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.

5.5

CVE-2021-23135

  • EPSS 0.23%
  • Veröffentlicht 12.05.2021 23:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:16

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior t...

6.1

CVE-2021-26924

  • EPSS 0.71%
  • Veröffentlicht 15.03.2021 15:15:14
  • Zuletzt bearbeitet 21.11.2024 05:57:03

An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.