Lucene search
GoogleOSV:GHSA-VJ54-CJRX-X696HistoryDec 09, 2021 - 7:59 p.m.
Observable Discrepancy in Argo
2021-12-0919:59:24
Google
osv.dev
4
0.001 Low
EPSS
Percentile
41.5%
Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned 401 for an existing username and 404 otherwise.
Specific Go Packages Affected
github.com/argoproj/argo-cd/util/session
github.com/argoproj/argo-cd/server/session
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/argoproj/argo-cd | eq | 1.5.0 |
Related
gitlab
gitlab
Observable Discrepancy
2021-12-09 00:00:00
cvelist
cvelist
CVE-2020-11576
2020-04-08 17:40:50
prion
prion
Code injection
2020-04-08 18:15:00
nvd
nvd
CVE-2020-11576
2020-04-08 18:15:15
cve
cve
CVE-2020-11576
2020-04-08 18:15:15
osv
osv
BIT-argo-cd-2020-11576
2024-03-06 10:52:16
CVE-2020-11576
2020-04-08 18:15:15
github
github
Observable Discrepancy in Argo
2021-12-09 19:59:24
veracode
veracode
Information Disclosure
2020-04-09 03:48:19