Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubect…
中危 CVSS 6.3
摘要
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation because HideSecretData(target, live, ...) does not fully sanitize ResourceDiff.TargetState and LiveState predicted live Secret objects, allowing sensitive data, stringData, and annotations to appear in UI or CLI diffs. This issue is fixed in vers…
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://github.com/argoproj/argo-cd/commit/7879e6322465080a82d152bf00f2b92e0f36c658
- https://github.com/argoproj/argo-cd/commit/87e9148320749693624d08e3d6fa2cc217c672a0
- https://github.com/argoproj/argo-cd/commit/ac11bec9986807adc8886ef1181eced7347ef5c6
- https://github.com/argoproj/argo-cd/commit/bcb4298afc9fcff5f5d69f4e1db2d0a75983f42c
- https://github.com/argoproj/argo-cd/releases/tag/v3.2.12
- https://github.com/argoproj/argo-cd/releases/tag/v3.3.10
- https://github.com/argoproj/argo-cd/releases/tag/v3.4.2
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-rg3g-4rw9-gqrp
时间线
- nvd_ingest NVD