In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
Metrics
Affected Vendors & Products
References
History
Wed, 07 Aug 2024 16:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Argoproj
Argoproj argo Cd |
|
CPEs | cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:* | |
Vendors & Products |
Linuxfoundation
Linuxfoundation argo Continuous Delivery |
Argoproj
Argoproj argo Cd |
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-04-09T16:18:37
Updated: 2024-08-05T12:19:27.421Z
Reserved: 2020-02-10T00:00:00
Link: CVE-2018-21034
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-04-09T17:15:12.703
Modified: 2024-11-21T04:02:44.707
Link: CVE-2018-21034
Redhat
No data.