Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22977
HistoryApr 09, 2020 - 3:48 a.m.

Information Disclosure

2020-04-0903:48:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

41.5%

github.com/argoproj/argo-cd is vulnerable to information disclosure. The vulnerability exists as it was possible to guess if a username exists through the VerifyUsernamePassword function in sessionmanager.go.

CPENameOperatorVersion
github.com/argoproj/argo-cdle1.5.0

0.001 Low

EPSS

Percentile

41.5%