tocsin

CVE-2022-31105

3 advisories.

Go/github.com/argoproj/argo-cd CVE-2022-31105: high 8.3

Argo CD certificate verification is skipped for connections to OIDC providers

Action: Upgrade github.com/argoproj/argo-cd to 2.2.11 or later.

go get github.com/argoproj/argo-cd@v2.2.11
go get github.com/argoproj/argo-cd@v2.3.6
go get github.com/argoproj/argo-cd@v2.4.5

Affected

introducedfixedlast affected
0.4.02.2.11-
2.3.02.3.6-
2.4.02.4.5-

Fixed versions

2.2.112.3.62.4.5

Sources

CVE-2022-31105 · published · modified · JSON

Go/github.com/argoproj/argo-cd CVE-2022-31105: unknown

Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0.4.0--

Fixed versions

No fixed version in the source.

Sources

CVE-2022-31105 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2022-31105: unknown

Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.2.11 or later.

go get github.com/argoproj/argo-cd/v2@v2.2.11
go get github.com/argoproj/argo-cd/v2@v2.3.6
go get github.com/argoproj/argo-cd/v2@v2.4.5

Affected

introducedfixedlast affected
02.2.11-
2.3.02.3.6-
2.4.02.4.5-

Fixed versions

2.2.112.3.62.4.5

Sources

CVE-2022-31105 · published · modified · JSON