CVE-2024-52814: Helm Lacks Granularity in Workflow Role
Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role) lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods created by the Controller require these privileges. The impact is minimal, as an attack could only affect status reporting for certain types of Pods and templates. Version 0.45.0 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52814?
CVE-2024-52814 is classified as a medium severity vulnerability due to the lack of privilege granularity in workflow roles.
How do I fix CVE-2024-52814?
To fix CVE-2024-52814, upgrade to Argo Helm version 0.45.0 or later.
What components are affected by CVE-2024-52814?
CVE-2024-52814 affects the workflow-role in Argo Helm versions prior to 0.45.0.
What are the potential consequences of CVE-2024-52814?
The consequences of CVE-2024-52814 include excessive permissions granted to all workflow Pods, leading to potential unauthorized access.
Who is impacted by CVE-2024-52814?
Users of Argo Helm versions before 0.45.0 are impacted by CVE-2024-52814 due to insufficient role-based access control.