CVE-2021-3557
published 2022-02-16CVE-2021-3557: A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the…
PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.75%
50.4th percentile
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidentiality.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| argoproj | argo_cd | < 1.1.1 | 1.1.1 |
| redhat | openshift_gitops | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
argocd: ServiceAccount argocd-argocd-server is able to read all resources of the whole cluster
vendor_redhat·2021-05-19·CVSS 6.5
CVE-2021-3557 [MEDIUM] CWE-732 argocd: ServiceAccount argocd-argocd-server is able to read all resources of the whole cluster
argocd: ServiceAccount argocd-argocd-server is able to read all resources of the whole cluster
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidentiality.
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidential
GHSA
GHSA-8fgv-frq2-3468: A flaw was found in argocd
ghsa_unreviewed·2022-02-17
CVE-2021-3557 [MEDIUM] CWE-732 GHSA-8fgv-frq2-3468: A flaw was found in argocd
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidentiality.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-02-16
Published