Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/06/06 7:4 p.m.33 views

Argo-cd authenticated users can enumerate clusters by name

Impact It’s possible for authenticated users to enumerate clusters by name by inspecting error messages: $ curl -k 'https://localhost:8080/api/v1/clusters/in-cluster?id.type=name' -H "Authorization: Bearer $token" "error":"permission denied: clusters, get, , sub: alice, iat:...

4.3CVSS4.5AI score0.00408EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder