CVE-2022-1025CWE-284

CVE-2022-1025: vulnerability in ArgoCD

Published · Updated

Follow this CVE+ Monitor argocd+ Monitor github.com/argoproj/argo-cd

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.
Affected products
n/a · ArgoCD