Fluid Attacks Database

Description

Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/argoproj/argo-cd/v2	>=2.9.3 <2.9.17	2.9.17
go	github.com/argoproj/argo-cd/v2/server	>=2.9.3 <2.9.17 \|\| >=2.10.0 <2.10.12 \|\| >=2.11.0 <2.11.3	2.9.17, 2.10.12, 2.11.3
go	github.com/argoproj/argo-cd	-	-

Aliases

1. CVE-2024-371522. NVD-2024-371523. OSV-GO-2024-29024. OSV-2024-371525. GHSA-87p9-x75h-p4j26. GCVE-2024-371527. GHSA-87p9-x75h-p4j2

References

1. https://github.com/argoproj/argo-cd/commit/256d90178b11b04bc8174d08d7b663a2a7b1771b2. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37152.yaml3. https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j24. https://pkg.go.dev/vuln/GO-2024-2902

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.