CVE-2023-23947: Argo CD improper authorization vulnerabilit
Reporter | Title | Published | Views | Family All 12 |
---|---|---|---|---|
![]() | Privilege Escalation | 17 Feb 202304:24 | – | veracode |
![]() | Users with any cluster secret update access may update out-of-bounds cluster secrets | 16 Feb 202320:47 | – | github |
![]() | CVE-2023-23947 Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets | 16 Feb 202317:39 | – | cvelist |
![]() | CVE-2023-23947 | 16 Feb 202318:15 | – | osv |
![]() | GHSA-3JFQ-742W-XG8J Users with any cluster secret update access may update out-of-bounds cluster secrets | 16 Feb 202320:47 | – | osv |
![]() | GO-2023-1577 Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd | 20 Aug 202420:26 | – | osv |
![]() | CVE-2023-23947 | 16 Feb 202320:59 | – | redhatcve |
![]() | Authorization | 16 Feb 202318:15 | – | prion |
![]() | CVE-2023-23947 | 16 Feb 202318:15 | – | nvd |
![]() | Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update | 17 Feb 202303:46 | – | redhat |
[
{
"vendor": "argoproj",
"product": "argo-cd",
"versions": [
{
"version": ">= 2.3.0-rc1, < 2.3.17",
"status": "affected"
},
{
"version": ">= 2.4.0, < 2.4.23",
"status": "affected"
},
{
"version": ">= 2.5.0, < 2.5.11",
"status": "affected"
},
{
"version": ">= 2.6.0, < 2.6.2",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo