GHSA-3CQF-953P-H5CP Argo-cd authenticated users can enumerate clusters by name

Impact It’s possible for authenticated users to enumerate clusters by name by inspecting error messages: $ curl -k 'https://localhost:8080/api/v1/clusters/in-cluster?id.type=name' -H "Authorization: Bearer $token" "error":"permission denied: clusters, get, , sub: alice, iat:...

Argo-cd authenticated users can enumerate clusters by name

Impact It’s possible for authenticated users to enumerate clusters by name by inspecting error messages: $ curl -k 'https://localhost:8080/api/v1/clusters/in-cluster?id.type=name' -H "Authorization: Bearer $token" "error":"permission denied: clusters, get, , sub: alice, iat:...

CGA-VFPC-G4P3-J9H4

Bulletin has no description...

CGA-V43R-MRV2-WJJ3

Bulletin has no description...

CGA-JVXV-V56M-JH46

Bulletin has no description...

CGA-H55M-GQGG-6877

Bulletin has no description...

CGA-R437-MPVW-QPHF

Bulletin has no description...

CGA-Q969-VF57-MFG2

Bulletin has no description...

CGA-J85H-RFQJ-G97X

Bulletin has no description...

CGA-C47P-H577-4GRJ

Bulletin has no description...

CGA-9V82-PC88-MFRW

Bulletin has no description...

CGA-9C4P-347J-PPPX

Bulletin has no description...

CGA-84XG-VFM8-VMC5

Bulletin has no description...

CGA-7942-4MRF-V638

Bulletin has no description...

CGA-6647-6V7F-83WJ

Bulletin has no description...

CGA-5VPJ-24RM-77C5

Bulletin has no description...

CGA-56RM-W32C-546X

Bulletin has no description...

CGA-6766-XPQF-V6PQ

Bulletin has no description...

CGA-4745-JPGX-R8RG

Bulletin has no description...

CGA-3925-79JH-MQHH

Bulletin has no description...