Advisories · Technology
Red Hat OpenShift GitOps.
Every CVE that names Red Hat OpenShift GitOps among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration
- Red Hat OpenShift GitOps
- Command injection
- CVSS 7.7 High
Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos
- Red Hat OpenShift GitOps
- Broken access control
- CVSS 8.9 High
Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
- argoproj argo-helm
- Red Hat OpenShift GitOps 1.19
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation
- Red Hat OpenShift GitOps
- CWE-1220