(RHSA-2024:4972) Important: Errata Advisory for Red Hat OpenShift GitOps v1.11.7 security update

2024-08-0110:47:08

access.redhat.com

errata advisory

red hat openshift gitops

v1.11.7

security fix

unauthenticated denial of service

dos vulnerability

argo cd

cve-2024-40634

cve-2023-40025.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

30.3%

JSON

Errata Advisory for Red Hat OpenShift GitOps v1.11.7.

Security Fix(es):

openshift-gitops-argocd-container: Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in Argo CD gitops-1.11
openshift-gitops-container: Argo CD web terminal session doesn’t expire gitops-1.11

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.