Lucene search
+L

2 matches found

OSV
OSV
added 2023/02/16 8:47 p.m.41 views

GHSA-3JFQ-742W-XG8J Users with any cluster secret update access may update out-of-bounds cluster secrets

Impact All Argo CD versions starting with v2.3.0-rc1 are vulnerable to an improper authorization bug which allows users who have the ability to update at least one cluster secret to update any cluster secret. The attacker could use this access to escalate privileges potentially controlling...

9.1CVSS9AI score0.00671EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/02/16 8:47 p.m.54 views

Users with any cluster secret update access may update out-of-bounds cluster secrets

Impact All Argo CD versions starting with v2.3.0-rc1 are vulnerable to an improper authorization bug which allows users who have the ability to update at least one cluster secret to update any cluster secret. The attacker could use this access to escalate privileges potentially controlling...

9.1CVSS8.8AI score0.00671EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder