Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-41354

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.

Published

2023-03-27T14:15:07.557

Last Modified

2024-11-21T07:23:06.407

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-203

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	linuxfoundation	argo-cd	< 2.4.28	Yes
Application	linuxfoundation	argo-cd	< 2.5.16	Yes
Application	linuxfoundation	argo-cd	< 2.6.7	Yes

References

http://argo.com Product ([email protected])
https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq Vendor Advisory ([email protected])
https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeration.md Broken Link ([email protected])
http://argo.com Product (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeration.md Broken Link (af854a3a-2127-422b-91ae-364da2661108)