{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.0"}],"component":"github.com/argoproj/argo-cd","cve_ids":["CVE-2020-8828"],"ecosystem":"Go","epss":0.018,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h8jc-jmrf-9h8f","id":"tcs_01M5KFC62G6QVMRVZXYC5GV5P3","modified_at":"2024-08-07T19:44:16Z","published_at":"2021-07-26T21:19:27Z","references":["https://osv.dev/vulnerability/GHSA-h8jc-jmrf-9h8f","https://nvd.nist.gov/vuln/detail/CVE-2020-8828","https://argo-cd.readthedocs.io/en/stable/security_considerations/#cve-2020-8828-insecure-default-administrative-password","https://argoproj.github.io/argo-cd/security_considerations","https://github.com/argoproj/argo-cd","https://github.com/argoproj/argo-cd/blob/129cf5370f9e2c6f99c9a5515099250a7ba42099/docs/security_considerations.md#cve-2020-8828---insecure-default-administrative-password","https://github.com/argoproj/argo/releases","https://www.soluble.ai/blog/argo-cves-2020"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-h8jc-jmrf-9h8f","url":"https://osv.dev/vulnerability/GHSA-h8jc-jmrf-9h8f"}],"summary":"Argo CD Insecure default administrative password"}