CVE-2022-41354

Description

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.

Affected Platforms

Weakness Type

CWE-203

References

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq
• https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeratio…
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq
• https://github.com/chunklhit/cve/blob/master/argo/argo-cd/application_enumeratio…