argo-cd vulnerabilities (Bitnami)
39 vulnerabilities.
-
argo-cdBitnami Argo CD: A Kustomize Helm config home can run commands in the repo-server 9.9 Critical -
argo-cdBitnami Argo CD: A Kustomize remote ref can run commands in the repo-server 9.9 Critical -
argo-cdBitnami Argo CD: A Jsonnet import can read files from the repo-server 9.9 Critical -
argo-cdBitnami Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 9.9 Critical -
argo-cdBitnami Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL 8.8 High -
argo-cdBitnami Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation 7.3 High -
argo-cdBitnami Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations 6.3 Medium -
argo-cdBitnami ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction 9.6 Critical -
argo-cdBitnami In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext... 7.7 High -
argo-cdBitnami Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook 7.5 High -
argo-cdBitnami argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload 7.5 High -
argo-cdBitnami Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload 7.5 High -
argo-cdBitnami Repository Credentials Race Condition Crashes Argo CD Server 6.5 Medium -
argo-cdBitnami Argo CD: Project API Token Exposes Repository Credentials 10.0 Critical -
argo-cdBitnami Argo CD allows cross-site scripting on repositories page 9.1 Critical -
argo-cdBitnami Argo CD does not scrub secret values from patch errors 6.8 Medium -
argo-cdBitnami The Argo CD web terminal session does not handle the revocation of user permissions properly. 4.7 Medium -
argo-cdBitnami Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint 7.5 High -
argo-cdBitnami Unauthenticated Access to sensitive settings in Argo CD 5.3 Medium -
argo-cdBitnami Argo CD allows authenticated users to enumerate clusters by name 4.3 Medium -
argo-cdBitnami ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache 9.1 Critical -
argo-cdBitnami Denial of Service via malicious jqPathExpressions in ignoreDifferences 6.5 Medium -
argo-cdBitnami Argo CD' API server does not enforce project sourceNamespaces 4.8 Medium -
argo-cdBitnami Uncontrolled Resource Consumption vulnerability in ArgoCD's repo server 6.5 Medium -
argo-cdBitnami Argo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment 7.5 High -
argo-cdBitnami Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow 7.5 High -
argo-cdBitnami Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss 9.8 Critical -
argo-cdBitnami Users with `create` but not `override` privileges can perform local sync in argo-cd 6.4 Medium -
argo-cdBitnami Cross-site scripting on application summary component in argo-cd 9.1 Critical -
argo-cdBitnami Denial of Service to Argo CD repo-server 6.5 Medium -
argo-cdBitnami Cluster secret might leak in cluster details page in Argo CD 9.9 Critical -
argo-cdBitnami Argo CD leaks repository credentials in user-facing error messages and in logs 6.3 Medium -
argo-cdBitnami Argo CD leaked secret data into error messages and logs on invalid edits via UI 5.9 Medium -
argo-cdBitnami Cross-site Scripting (XSS) 4.7 Medium -
argo-cdBitnami In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled. 6.5 Medium -
argo-cdBitnami Argo CD Insecure default administrative password 8.8 High -
argo-cdBitnami Improper Restriction of Excessive Authentication Attempts in Argo API 7.5 High -
argo-cdBitnami As of v1.5.0, the Argo web interface authentication system issued immutable tokens.... 7.5 High -
argo-cdBitnami Observable Discrepancy in Argo 5.3 Medium