CVE-2022-1025: Critical severity argo cd vulnerability
Published Jul 12, 2022
·Updated
All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.
Affected Software
6 affected components
argoproj Argo CD>=0.5.0<=2.1.12
argoproj Argo CD>=2.2.0<=2.2.7
argoproj Argo CD>=2.3.0<=2.3.1
linuxfoundation Argo-cd>=0.5.0<=2.1.12
linuxfoundation Argo-cd>=2.2.0<=2.2.7
linuxfoundation Argo-cd>=2.3.0<=2.3.1
Event History
Jul 12, 2022
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Argo CD vulnerability?
The vulnerability ID for this Argo CD vulnerability is CVE-2022-1025.
2
What is the severity of CVE-2022-1025?
The severity of CVE-2022-1025 is critical with a severity value of 8.8.
3
What does CVE-2022-1025 affect?
CVE-2022-1025 affects all unpatched versions of Argo CD starting with v1.0.0.
4
What is the impact of CVE-2022-1025?
CVE-2022-1025 allows a malicious user to potentially escalate their privileges to admin-level.
5
How can I fix CVE-2022-1025?
To fix CVE-2022-1025, it is recommended to apply the latest patch provided by Argo CD.