Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 10.0.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- argo-helm
fixed in 10.0.0
- openshift-gitops-1/argocd-rhel8
Version range not reported
- openshift-gitops-1/gitops-rhel8-operator
Version range not reported
- odf4/odf-multicluster-rhel9-operator
Version range not reported
- openshift-gitops-1/argocd-agent-rhel8
Version range not reported
- openshift-gitops-1/argocd-agent-rhel9
Version range not reported
- openshift-gitops-1/argocd-image-updater-rhel8
Version range not reported
- openshift-gitops-1/argocd-image-updater-rhel9
Version range not reported
- openshift-gitops-1/argocd-rhel9
Version range not reported
- openshift-gitops-1/gitops-operator-bundle
Version range not reported
- openshift-gitops-1/gitops-rhel8
Version range not reported
- openshift-gitops-1/gitops-rhel9
Version range not reported
- openshift-gitops-1/gitops-rhel9-operator
Version range not reported