{"containers": {"cna": {"affected": [{"product": "argo-cd", "vendor": "argoproj", "versions": [{"status": "affected", "version": "< 2.1.15"}, {"status": "affected", "version": ">= 2.2.0, < 2.2.9"}, {"status": "affected", "version": ">= 2.3.0, < 2.3.4"}]}], "descriptions": [{"lang": "en", "value": "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled. In order to exploit this vulnerability, an attacker would have to trick the victim to visit a specially crafted URL which contains the message to be displayed. As far as the research of the Argo CD team concluded, it is not possible to specify any active content (e.g. Javascript) or other HTML fragments (e.g. clickable links) in the spoofed message. A patch for this vulnerability has been released in Argo CD versions 2.3.4, 2.2.9, and 2.1.15. There are currently no known workarounds."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20: Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-20T14:05:11", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.1.15"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.2.9"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.3.4"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j"}], "source": {"advisory": "GHSA-xmg8-99r8-jc2j", "discovery": "UNKNOWN"}, "title": "Argo CD login screen allows message spoofing if SSO is enabled", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2022-24905", "STATE": "PUBLIC", "TITLE": "Argo CD login screen allows message spoofing if SSO is enabled"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "argo-cd", "version": {"version_data": [{"version_value": "< 2.1.15"}, {"version_value": ">= 2.2.0, < 2.2.9"}, {"version_value": ">= 2.3.0, < 2.3.4"}]}}]}, "vendor_name": "argoproj"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled. In order to exploit this vulnerability, an attacker would have to trick the victim to visit a specially crafted URL which contains the message to be displayed. As far as the research of the Argo CD team concluded, it is not possible to specify any active content (e.g. Javascript) or other HTML fragments (e.g. clickable links) in the spoofed message. A patch for this vulnerability has been released in Argo CD versions 2.3.4, 2.2.9, and 2.1.15. There are currently no known workarounds."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-20: Improper Input Validation"}]}]}, "references": {"reference_data": [{"name": "https://github.com/argoproj/argo-cd/releases/tag/v2.1.15", "refsource": "MISC", "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.1.15"}, {"name": "https://github.com/argoproj/argo-cd/releases/tag/v2.2.9", "refsource": "MISC", "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.2.9"}, {"name": "https://github.com/argoproj/argo-cd/releases/tag/v2.3.4", "refsource": "MISC", "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.3.4"}, {"name": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j", "refsource": "CONFIRM", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j"}]}, "source": {"advisory": "GHSA-xmg8-99r8-jc2j", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:29:00.838Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.1.15"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.2.9"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.3.4"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2022-24905", "datePublished": "2022-05-20T14:05:11", "dateReserved": "2022-02-10T00:00:00", "dateUpdated": "2024-08-03T04:29:00.838Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*", "matchCriteriaId": "C87BFDED-55EB-4622-A38F-3F568765608C", "versionEndExcluding": "2.1.15", "versionStartIncluding": "0.6.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*", "matchCriteriaId": "97EADC28-ADC0-4B9E-BBDB-E2EF244B4BD9", "versionEndExcluding": "2.2.9", "versionStartIncluding": "2.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*", "matchCriteriaId": "21A2130E-E263-4B62-B75D-E0631020E8E0", "versionEndExcluding": "2.3.4", "versionStartIncluding": "2.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled. In order to exploit this vulnerability, an attacker would have to trick the victim to visit a specially crafted URL which contains the message to be displayed. As far as the research of the Argo CD team concluded, it is not possible to specify any active content (e.g. Javascript) or other HTML fragments (e.g. clickable links) in the spoofed message. A patch for this vulnerability has been released in Argo CD versions 2.3.4, 2.2.9, and 2.1.15. There are currently no known workarounds."}, {"lang": "es", "value": "Argo CD es una herramienta declarativa de entrega continua GitOps para Kubernetes. Se encontr\u00f3 una vulnerabilidad en Argo CD En versiones anteriores a 2.3.4, 2.2.9 y 2.1.15 que permite a un atacante falsificar los mensajes de error en la pantalla de inicio de sesi\u00f3n cuando el inicio de sesi\u00f3n \u00fanico (SSO) est\u00e1 habilitado. Para explotar esta vulnerabilidad, un atacante tendr\u00eda que enga\u00f1ar a la v\u00edctima para que visite una URL especialmente dise\u00f1ada que contenga el mensaje a mostrar. Seg\u00fan las investigaciones del equipo de CD de Argo, no es posible especificar ning\u00fan contenido activo (por ejemplo, Javascript) ni otros fragmentos de HTML (por ejemplo, enlaces en los que pueda hacerse clic) en el mensaje falsificado. Ha sido publicado un parche para esta vulnerabilidad en las versiones 2.3.4, 2.2.9 y 2.1.15 de Argo CD. En la actualidad no se conocen mitigaciones"}], "id": "CVE-2022-24905", "lastModified": "2024-08-07T15:43:51.540", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2022-05-20T14:15:09.360", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.1.15"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.2.9"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/argoproj/argo-cd/releases/tag/v2.3.4"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/applicationset-rhel8:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/argocd-rhel8:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/dex-rhel8:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-operator-bundle:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-rhel8:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-rhel8-operator:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4671", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/kam-delivery-rhel8:v1.3.10-1", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/applicationset-rhel8:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/argocd-rhel8:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/dex-rhel8:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-operator-bundle:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-rhel8:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/gitops-rhel8-operator:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4691", "cpe": "cpe:/a:redhat:openshift_gitops:1.3::el8", "package": "openshift-gitops-1/kam-delivery-rhel8:v1.3.9-3", "product_name": "Red Hat OpenShift GitOps 1.3", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/applicationset-rhel8:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/argocd-rhel8:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/dex-rhel8:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/gitops-operator-bundle:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/gitops-rhel8:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/gitops-rhel8-operator:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4692", "cpe": "cpe:/a:redhat:openshift_gitops:1.4::el8", "package": "openshift-gitops-1/kam-delivery-rhel8:v1.4.7-2", "product_name": "Red Hat OpenShift GitOps 1.4", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/applicationset-rhel8:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/argocd-rhel8:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/dex-rhel8:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/gitops-operator-bundle:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/gitops-rhel8:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/gitops-rhel8-operator:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}, {"advisory": "RHSA-2022:4690", "cpe": "cpe:/a:redhat:openshift_gitops:1.5::el8", "package": "openshift-gitops-1/kam-delivery-rhel8:v1.5.1-4", "product_name": "Red Hat OpenShift GitOps 1.5", "release_date": "2022-05-18T00:00:00Z"}], "bugzilla": {"description": "argocd: Login screen allows message spoofing if SSO is enabled", "id": "2081689", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081689"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "status": "verified"}, "cwe": "CWE-20->CWE-290", "details": ["Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled. In order to exploit this vulnerability, an attacker would have to trick the victim to visit a specially crafted URL which contains the message to be displayed. As far as the research of the Argo CD team concluded, it is not possible to specify any active content (e.g. Javascript) or other HTML fragments (e.g. clickable links) in the spoofed message. A patch for this vulnerability has been released in Argo CD versions 2.3.4, 2.2.9, and 2.1.15. There are currently no known workarounds."], "name": "CVE-2022-24905", "public_date": "2022-05-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-24905\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-24905\nhttps://github.com/argoproj/argo-cd/security/advisories/GHSA-xmg8-99r8-jc2j"], "threat_severity": "Moderate"}