Argo-cd vulnerabilities

2 known vulnerabilities in Argo-cd from Linux Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  argo-cd: Missing Authentication for Critical Functionality

  CVE-2024-37152Jun 6, 2024ArgoprojEPSS 2.35%

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPatte

• 9.1 Critical severity

  argo-cd: Improper Restriction of Excessive Authentication Attempts

  CVE-2024-21662Mar 18, 2024Argoproj

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. Thi