Lucene search
Veracode Vulnerability DatabaseVERACODE:29320HistoryFeb 10, 2021 - 2:48 a.m.
Insecure Session Management
2021-02-1002:48:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
36.9%
github.com/argoproj/argo-cd handles session tokens in an insecure manner. The issue arises when it does not check if an account is deactivated before returning a valid token claim.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/argoproj/argo-cd | le | v1.8.3 | |
| github.com/argoproj/argo-cd | le | v1.7.13 |
Related
osv
osv
BIT-argo-cd-2021-26921
2024-03-06 10:51:16
CVE-2021-26921
2021-02-09 15:15:13
cve
cve
CVE-2021-26921
2021-02-09 15:15:13
prion
prion
Code injection
2021-02-09 15:15:00
cvelist
cvelist
CVE-2021-26921
2021-02-09 14:08:55
nvd
nvd
CVE-2021-26921
2021-02-09 15:15:13