Fluid Attacks Database

Description

Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/argoproj/argo-cd	>=0.5.0 <2.1.14 \|\| >=2.2.0 <2.2.8 \|\| >=2.3.0 <2.3.2	2.1.14, 2.2.8, 2.3.2
go	github.com/argoproj/argo-cd/v2	>=0 <2.1.14	2.1.14

Aliases

1. CVE-2022-247682. NVD-2022-247683. OSV-2022-247684. OSV-GO-2022-03595. GHSA-2f5v-8r3f-8pww6. GCVE-2022-247687. GHSA-2f5v-8r3f-8pww

References

1. https://github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pww2. https://github.com/argoproj/argo-cd/commit/af03b291d4b7e9d3ce9a6580ae9c8141af0e05cf3. https://github.com/argoproj/argo-cd/releases/tag/v2.1.144. https://github.com/argoproj/argo-cd/releases/tag/v2.2.85. https://github.com/argoproj/argo-cd/releases/tag/v2.3.2

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.