Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/12/02 10:17 p.m.42 views

Access to Archived Argo Workflows with Fake Token in `client` mode

Summary When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name When using --auth-mode=sso, all Archived Workflows can be retrieved with a valid token via the GET Workflow endpoint:...

7.5CVSS7AI score0.00656EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder