4 matches found
Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server
Impact All unpatched versions of Argo CD starting with v1.3.0 are vulnerable to a path traversal bug, compounded by an improper access control bug, allowing a malicious user with read-only repository access to leak sensitive files from Argo CD's repo-server. A malicious Argo CD user who has been...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...
