En resumen
- CVE-2020-8827 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a github.com/argoproj/argo-cd, argo cd (argoproj).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.6% de las vulnerabilidades.
- Solución: actualizar a 1.5.1, 1.5.0 o posterior.
Description
As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.
Specific Go Packages Affected
github.com/argoproj/argo-cd/util/cache
NVD description
As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.
Más vulnerabilidades de github.com/argoproj/argo-cd
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free