High severityNVD Advisory· Published Jul 12, 2022· Updated Aug 2, 2024
CVE-2022-1025
CVE-2022-1025
Description
All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/argoproj/argo-cdGo | >= 0.5.0, <= 1.8.7 | — |
github.com/argoproj/argo-cd/v2Go | < 2.1.14 | 2.1.14 |
github.com/argoproj/argo-cd/v2Go | >= 2.2.0, < 2.2.8 | 2.2.8 |
github.com/argoproj/argo-cd/v2Go | >= 2.3.0, < 2.3.2 | 2.3.2 |
Affected products
3- Argo CD/Argo CDdescription
- ghsa-coords2 versions
>= 0.5.0, <= 1.8.7+ 1 more
- (no CPE)range: >= 0.5.0, <= 1.8.7
- (no CPE)range: < 2.1.14
Patches
Vulnerability mechanics
References
10- github.com/advisories/GHSA-96jv-vj39-x4j6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-1025ghsaADVISORY
- access.redhat.com/errata/RHSA-2022:1039ghsaWEB
- access.redhat.com/errata/RHSA-2022:1040ghsaWEB
- access.redhat.com/errata/RHSA-2022:1041ghsaWEB
- access.redhat.com/errata/RHSA-2022:1042ghsaWEB
- access.redhat.com/security/cve/CVE-2022-1025ghsaWEB
- bugzilla.redhat.com/show_bug.cgighsaWEB
- github.com/argoproj/argo-cd/commit/af03b291d4b7e9d3ce9a6580ae9c8141af0e05cfghsaWEB
- github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pwwghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.