{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration\u2014there was no refresh or forced re-authentication."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-04-08T19:38:54", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/argoproj/argo/releases"}, {"tags": ["x_refsource_MISC"], "url": "https://www.soluble.ai/blog/argo-cves-2020"}, {"tags": ["x_refsource_MISC"], "url": "https://argoproj.github.io/argo-cd/security_considerations/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2020-8826", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration\u2014there was no refresh or forced re-authentication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/argoproj/argo/releases", "refsource": "MISC", "url": "https://github.com/argoproj/argo/releases"}, {"name": "https://www.soluble.ai/blog/argo-cves-2020", "refsource": "MISC", "url": "https://www.soluble.ai/blog/argo-cves-2020"}, {"name": "https://argoproj.github.io/argo-cd/security_considerations/", "refsource": "MISC", "url": "https://argoproj.github.io/argo-cd/security_considerations/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T10:12:10.653Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/argoproj/argo/releases"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.soluble.ai/blog/argo-cves-2020"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://argoproj.github.io/argo-cd/security_considerations/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-8826", "datePublished": "2020-04-08T19:38:54", "dateReserved": "2020-02-10T00:00:00", "dateUpdated": "2024-08-04T10:12:10.653Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE9A9B1A-E8BA-4617-9BB4-F33D4F7DE386", "versionEndIncluding": "1.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration\u2014there was no refresh or forced re-authentication."}, {"lang": "es", "value": "A partir de la versi\u00f3n v1.5.0, el sistema de autenticaci\u00f3n de la interfaz web de Argo emiti\u00f3 tokens inmutables. Los tokens de autenticaci\u00f3n, una vez emitidos, fueron usables para siempre sin caducidad: no exist\u00eda actualizaci\u00f3n ni reautenticaci\u00f3n forzada."}], "id": "CVE-2020-8826", "lastModified": "2024-11-21T05:39:31.043", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2020-04-08T20:15:14.653", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://argoproj.github.io/argo-cd/security_considerations/"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/argoproj/argo/releases"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.soluble.ai/blog/argo-cves-2020"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://argoproj.github.io/argo-cd/security_considerations/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/argoproj/argo/releases"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.soluble.ai/blog/argo-cves-2020"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-384"}], "source": "[email protected]", "type": "Primary"}]}

{}