tocsin

CVE-2024-37152

3 advisories.

Go/github.com/argoproj/argo-cd/v2/server CVE-2024-37152: medium 5.3

Unauthenticated Access to sensitive settings in Argo CD

Action: Upgrade github.com/argoproj/argo-cd/v2/server to 2.9.17 or later.

go get github.com/argoproj/argo-cd/v2/server@v2.9.17
go get github.com/argoproj/argo-cd/v2/server@v2.10.12
go get github.com/argoproj/argo-cd/v2/server@v2.11.3

Affected

introducedfixedlast affected
2.9.32.9.17-
2.10.02.10.12-
2.11.02.11.3-

Fixed versions

2.9.172.10.122.11.3

Sources

CVE-2024-37152 · published · modified · JSON

Go/github.com/argoproj/argo-cd CVE-2024-37152: unknown

Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-37152 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2024-37152: unknown

Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.9.17 or later.

go get github.com/argoproj/argo-cd/v2@v2.9.17
go get github.com/argoproj/argo-cd/v2@v2.10.12
go get github.com/argoproj/argo-cd/v2@v2.11.3

Affected

introducedfixedlast affected
2.9.32.9.17-
2.10.02.10.12-
2.11.02.11.3-

Fixed versions

2.9.172.10.122.11.3

Sources

CVE-2024-37152 · published · modified · JSON