Описание
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Ссылки
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3
- https://nvd.nist.gov/vuln/detail/CVE-2026-43824
- https://access.redhat.com/security/cve/CVE-2026-43824
- https://bugzilla.redhat.com/show_bug.cgi?id=2464613
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43824.json
Связанные уязвимости
CVSS3: 9.6
redhat
3 месяца назад
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
CVSS3: 7.7
nvd
3 месяца назад
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.