CVE-2022-1025

State: Published
Severity: Not scored
Published: Jul 12, 2022
Updated: Aug 2, 2024
Reserved: Mar 18, 2022

Description

All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.

Scores

The record has no CVSS score.

Weaknesses

CWE-284 >CWE-1220

Affected Products

Product	Versions
ArgoCDn/a	0.5.0 through 2.1.12, 2.2.7, 2.3.1Affected

References

https://github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pww

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.