CVE-2022-41354
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.
| Software | From | Fixed in |
|---|---|---|
| linuxfoundation / argo-cd | 2.6.0 | 2.6.7 |
| linuxfoundation / argo-cd | 0.5.0 | 2.4.28 |
| linuxfoundation / argo-cd | 2.5.0 | 2.5.16 |
github.com/argoproj/argo-cd
|
0.5.0 | 1.8.7.x |
|
github.com/argoproj/argo-cd/v2
|
2.5.0 | 2.5.16 |
|
github.com/argoproj/argo-cd/v2
|
2.6.0 | 2.6.7 |
|
github.com/argoproj/argo-cd/v2
|
- | 2.4.28 |
- http://argo.com
- https://github.com/argoproj/argo-cd/commit/3a28c8a18cc2aa84fe81492625545d25c7a90bc3
- https://github.com/argoproj/argo-cd/releases/tag/v2.4.28
- https://github.com/argoproj/argo-cd/releases/tag/v2.5.16
- https://github.com/argoproj/argo-cd/releases/tag/v2.6.7
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq
- https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeration.md
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime