In breve
- CVE-2020-8827 è una vulnerabilità ALTO (CVSS 7.5) che riguarda github.com/argoproj/argo-cd, argo cd (argoproj).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.6% delle vulnerabilità.
- Correzione: aggiornare a 1.5.1, 1.5.0 o successiva.
Description
As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.
Specific Go Packages Affected
github.com/argoproj/argo-cd/util/cache
NVD description
As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.
Altre vulnerabilità di github.com/argoproj/argo-cd
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free