Database/Container, Kubernetes & orchestration
Argo CD: Unauthenticated attacker forges JWTs and gains full Argo CD admin, which in a GitOps cluster
CVSS 10.0CVE-2022-29165Container, Kubernetes & orchestrationcurated
Impact
Unauthenticated attacker forges JWTs and gains full Argo CD admin, which in a GitOps cluster means cluster-admin
Who can reach it
Unauthenticated network reaching the Argo CD API
What to do
Emergency Argo CD upgrade; rotate the signing key and all tokens; audit all Applications for tampering
References
Related entries
- Argo CD: Improper access control allows a low-privileged user to escalate to Argo CD adminCVE-2022-24768 · Argo CDCritical
- Argo CD: Cluster secrets stored in the last-applied-configuration annotation are readable by anyone with get accessCVE-2023-40029 · Argo CDCritical
- Argo CD: Chained DoS plus in-memory data manipulation lets an attacker bypass authenticationCVE-2024-21652 · Argo CDCritical
- Argo CD: Improper authorization lets a user modify resources outside their permitted projectsCVE-2023-23947 · Argo CDCritical
- Argo CD: Stored XSS via a `javascript:` link executes in an admin's browserCVE-2022-31035 · Argo CDCritical
- Argo CD: Improper authorization causes the API to accept tokens it should rejectCVE-2023-22482 · Argo CDCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.