tocsin

CVE-2023-40025

3 advisories.

Go/github.com/argoproj/argo-cd/v2 CVE-2023-40025: high 7.1

Argo CD web terminal session doesn't expire

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.0.0-20230821201509-e047efa8f951 or later.

go get github.com/argoproj/argo-cd/v2@v2.6.14
go get github.com/argoproj/argo-cd/v2@v2.7.12
go get github.com/argoproj/argo-cd/v2@v2.8.1
go get github.com/argoproj/argo-cd/v2@v2.0.0-20230821201509-e047efa8f951

Affected

introducedfixedlast affected
2.6.02.6.14-
2.7.02.7.12-
2.8.02.8.1-
2.0.0-20230718200744-12a5a7a70d6e2.0.0-20230821201509-e047efa8f951-

Fixed versions

2.6.142.7.122.8.12.0.0-20230821201509-e047efa8f951

Sources

CVE-2023-40025 · published · modified · JSON

Go/github.com/argoproj/argo-cd CVE-2023-40025: unknown

Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-40025 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2023-40025: unknown

Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.6.14 or later.

go get github.com/argoproj/argo-cd/v2@v2.6.14
go get github.com/argoproj/argo-cd/v2@v2.7.12
go get github.com/argoproj/argo-cd/v2@v2.8.1

Affected

introducedfixedlast affected
2.6.02.6.14-
2.7.02.7.12-
2.8.02.8.1-

Fixed versions

2.6.142.7.122.8.1

Sources

CVE-2023-40025 · published · modified · JSON