En bref
- CVE-2018-21034 est une vulnérabilité MOYENNE (CVSS 6.5) touchant github.com/argoproj/argo-cd, argo cd (argoproj).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 72.0% des vulnérabilités.
- Correctif : mettre à jour vers 1.5.0-rc1 ou plus récent.
Description
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
NVD description
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
Autres vulnérabilités de github.com/argoproj/argo-cd
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free