CVE-2023-40025

highPriorität · verfolgen · 28EPSS 0.006 · 47. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.57% (47th) EPSS
CVSS 7.1 · high
Is it mine?
80 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-27

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting from version 2.6.0 have a bug where open web terminal sessions do not expire. This bug allows users to send any websocket messages even if the token has already expired. The most straightforward scenario is when a user opens the terminal view and leaves it open for an extended period. This allows the user to view sensitive information even when they should have been logged out already. A patch for this vulnerability has been released in the following Argo CD versions: 2.6.14, 2.7.12 and 2.8.1.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:09a25a05e5d7e786beb2aeb2900cdf9d9b7318a87065539d818d48ca12097efb_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:31fadc4e401db9f7af9d06100dba0999525940a1ccb256dd0befcfd80f427c90_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:5b5783216e793d74aad31abaa18e644f21ce645e736c6e4faaf061c51ffced18_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:9ae9beb8a3c1c4ace3f2c37d230416cf52426816105a3b9ea759bb5b7de5547a_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:dbd4a26ceb74570bb3d3b4b9ef911f6d8c14c2affdd4627fcf666bdbf88b922b_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:ea0181fdffaea17edf31b32830075f33e5bd7e5e951fb12c7734a3beb5fb6a12_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:f209de3c136c821251fb8e892250c79ab47c02bc7b4f773b280aeef9acacbe41_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:fb0f944ef8c85fdd51e9d4ffa785217436989bb9388935392b9743f6c0157fb4_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:3f6354df560a086dd2d3d066bb316fa29b2f90409664352da5b4d5379b1bd59a_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:826924158016a472f215b2154a3b71b0bb45dcb5faee4009023a9ff91b80fbc7_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:b059fed1e6cbdfa744ca40f63eebd7852918e60f6e63a56e6c4c8b47cfb7297a_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:bef56e9030b779020fd4d424af1c4da8bcdf46a89d1d5505cacda5aba17b3f5f_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:07bd1d4c9625d632c25f9b26f5afab0a0b385a01ceda8262a20d63d9380363c0_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:aa363327f2abce3c55dd7343c1024d0f46826e8d4da66126e63181702542352c_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:c6339f1ca0a031eedc1f77755f84c10bc096603c62e4d41266c1f57c723a5fe8_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:d668d7dd535b8bd007d6d9c667a847aadd4184e60bff23c13710034d99b4cb78_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-operator-bundle@sha256:8d786bb519f9caa8c56b5a1de9bbfa92161f697644329114af3af5f324797787_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:16c13cf844a266006ca6242a13be9e5d3a1f57b561fbc0eb4fd22914a0297913_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:2da7b90a1c514f1d86d90b6f546c26480377d6f752deca9ae6bc3d23ff3bb991_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:7eed2ed5c7db8a702917e5f989a4742be3d0e63dc41a3ac6e2dd9d8a2ef586ec_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:f269a0edec8e132ca4a8bbc8c2fcec5bbe8b992c6f4fb731f4f457f0881e95eb_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:3adcc88984e8c288ecd8a0ae3b3a3dbf6e6d9260432bc934772060bd4d477d70_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:5de8d57c81bc70b3112cd331dfa701f1bc995eba8568a1cf71c4390538efaf06_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:b6ce0737682b89998c094db766d464eaac7717f4af6df87fb927d74892ac9056_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:f26223d724c39de4b86d1abf3db446b38fdcd7231323f8ffe34a11f2a4db033c_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:523305513ec6ea969620607c0bf5bea96eb192b14dec0d5660cbc28dae9f9552_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:71532e658e81a9daeb5d84c29851a56b8fe1b20f7a38bd3783002d0f3f611272_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:dfd515876281d0eeffa51ad725bda5c48da3a9225f5e577e41a0aec58614a582_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:f69026a41ac59c45855de3575b70fe94821f74686abf92125f9d0ef28918db9d_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:1f066935b3a9de1add896aa3c17da8918afd418669bb541a25b27708dd9752cd_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:3b669408440a2e15c285e62c20656198c7f0caecc04d2f10b4abcc649fddf887_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:68edbdcbd72a6ccf7d07d04e148227673ad34c8add04d9ab4770f4bbf3937974_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:c3b22b39fccff18999ae7c11ea239f8ca2189b18e8c9ab770e81c35ba6a02632_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4972
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:18b430d162405a964f846242be0c3b7014be4c33689a3a8743b44238c9d7fb75_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:5a9383d8434b4e435d87fa2cecef424f99474bd9a0cb4ea7f7ec503e5dcf0678_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:bdfbf535f858e2c2e1abb74c2d513bf5f970d105f7d7b9678adb4702934056db_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argo-rollouts-rhel8@sha256:cb95a31e6445ba30f6189fd8ff2ef6f75b37d7d5835ca168b0a4ea6f03678b1f_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:3bd5a449c9f9d8f36dcb190c5cf245c7700993a81cf44a65ef3bc3e23bbf1661_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:50d0f3f3f9fa326e666bd3d10925cf8b833db3d6d2dd74ddb892df038538505d_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:b2596687f550a204e1c0994583406f857faa1917a1e41561d6b154071c3ed63e_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel8@sha256:e4859aef6c26fbadaa45f4e37813977208f490f6f1c047621591ad6be30577b3_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel9@sha256:233b230e32fb38dfddc32ef3046568d80816031c9a6fcff8393448ba452d4f50_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/argocd-rhel9@sha256:c5cbc537b3079fc08d118434ac23e262d9e679adf4143d2be05009831bfa3e6f_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:5fe4ade2ee712defbdd1e0b64af88b62ed7c9bd95ee896e1a9de5ac528320e19_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:ba1ed27f053c5cbb54febfa8b03a038250c557586c501e09abe6906592cdcd19_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:c26725f56d3fe072550431d490cd4faefc7bed9dc624d5f6c240044e736accc5_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/console-plugin-rhel8@sha256:e3979829c8f831fac5a8f7e22e620b8d79cb223dc973a4d9d1fe3b6245bf6ab4_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:67837763574902fd1c6ac1bff6bd7efe6e1fab7049389ae69bc21f50d810397c_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:af0b83accf4344127f61b381dd4f520cda86ade8ee983f1c1ebf11a439f021a7_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:d002617194b11ad14c836a5367ca0198be802c40d8e86b54f188f80fbdf70ff1_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/dex-rhel8@sha256:dbcaa78bc38f4f413eb826f39473c775ec47e64dd17a8779f2c74bf1e65631b5_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-operator-bundle@sha256:47798cd9f0498560eab4efede77f144b937b07ddb77e3831b654f51d1a5b04b6_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:81bc146c5dfbacde091a03ed12d04b61bc33258d44203798e332efb0ee5c27f9_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:9164b66f491acb3f5ad79a44b1a0d342644bc3c860e98fd2034aa7676b897024_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:edfa5765e92902d63473e1921d4814a007db7bf7242a11b929b1550954ea1dde_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:f979017b7f16d95047c74a087eac689f339cb0a6ad8fa740c138151162a83e29_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:5f9ae6792724ac2e40928d65981d33d54cb29e0d03a4c76eb18deabdf76601bc_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:75cbc8b5e4b25ded63ad9dfec0e1acaca8f0779c85c8e28b489ba2292d176c2b_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:a0684ea750c0aef0ee43e8802a41464d2d6a59a33e698e871b544e7052a6ebc8_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/gitops-rhel8@sha256:eb2ad7951c4e0125fb803d681f42f6e8a4d0ce03e1be9567f3aeb9d131c3ed5b_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:178d6bd716c9054f92c9f3889b9f005ca5fd9934b39834e7e13bb34600b24b6b_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:1e17fb78bcf6d4799b02e514527010cf267502d982c2f6e7ce92309e9d0cf550_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:9f4d4a389a54f9c58527e7b5177b11b2f2829ef59a56fae3a4f70192a4823b32_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:fd3214d586fd54846577a57285378b87cade3575911d6040701aee903a53800a_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:02ebf2575bd5991d75d02355967659c71e52f1e7e86bf92e05e614280712552a_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:103da26a12b0f6408da3a16b93a4051ae3c2bd68c5c23398ab09d6a3bc33cb3b_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:423090fd4a5d3f096c61c0445c005da53095dff0154b9ad680c3749b7ef6e4dd_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
  • Behobenopenshift-gitops-1/must-gather-rhel8@sha256:888cc5b63ecee0f30e1ae45faf5ccb2d17c73c902a918b9c2e5abe85f8579f46_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4973
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.7–7.1

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 4.2
v3.14.7mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:Lsecondary · ENISA EU
v3.14.7mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:Lsecondary · security-advisories@github.comAusnutzbarkeit 1.2 · Auswirkung 3.4
v3.17.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:Nsecondary · OSV
v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.17.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:Nsecondary · Red Hat Product Security US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-613USCWE-613USCWE-613US
05

betroffene Produkte (80)

Betroffene Produkte und Versionsbereiche.

20 von 80 angezeigt
06

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2024:4972Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.7 security update2024-08-01csaf · redhat_csafUS

    An update is now available for Red Hat OpenShift GitOps v1.11.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:4973Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.5 security update2024-08-01csaf · redhat_csafUS

    An update is now available for Red Hat OpenShift GitOps v1.12.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2024-1718Red Hat OpenShift (GitOps): Schwachstelle ermöglicht Denial of ServiceDeutsch2024-07-28csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • GHSA-c8xw-vjgf-94hrArgo CD web terminal session doesn't expire2023-08-23ghsa · osvUS

    ### Impact All versions of Argo CD starting from v2.6.0 have a bug where open web terminal sessions do not expire. This bug allows users to send any websocket messages even if the token has already expired. The most straightforward scenario is when a user opens the terminal view and leaves it open for an extended period. This allows the user to view sensitive information even when they should have been logged out already. ### Patches A patch for this vulnerability has been released in the following Argo CD version: * v2.6.14 * v2.7.12 * v2.8.1 ### Workarounds The only way to completely resolve the issue is to upgrade. #### Mitigations Disable web-based terminal or define RBAC rules to it [https://argo-cd.readthedocs.io/en/latest/operator-manual/web_based_terminal/](https://argo-cd.readthedocs.io/en/latest/operator-manual/web_based_terminal/) ### For more information If you have any questions or comments about this advisory: * Open an issue in [the Argo CD issue tracker](https://github.com/argoproj/argo-cd/issues) or [discussions](https://github.com/argoproj/argo-cd/discussions) * Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-cd ### Credits Thank you to bean.zhang (@zhlu32 ) of HIT-IDS ChunkL Team who discovered the issue and reported it confidentially according to our [guidelines](https://github.com/argoproj/argo-cd/blob/master/SECURITY.md#reporting-a-vulnerability).

  • GO-2023-2018Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd2024-08-21vendor · osvUS

    Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdosvcert_bundnvdredhat_csafNVDCVE.orgMITRE
veröffentlicht 2023-08-23geändert 2026-06-17
09

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan