Red Hat Security Advisory

RHSA-2022:4671

Red Hat OpenShift GitOps security update

Released 2022-05-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.3 openshift-gitops-1/applicationset-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/dex-rhel8 +4

TI-2022-11709 CVE-2022-29165 · GHSA-r642-gv9p-2wjj

MEDIUM 53

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02103 Published 2022-05-20 Fixed in 2.1.15, 2.2.9 +1 CWE-200

TI-2022-08715 CVE-2022-24905 · GHSA-xmg8-99r8-jc2j

LOW 23

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01302 Published 2022-05-20 Fixed in 2.1.15, 2.2.9 +1 CWE-20

TI-2022-08714 CVE-2022-24904 · GHSA-6gcg-hp2x-q54h

LOW 22

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01151 Published 2022-05-20 Fixed in 2.1.15, 2.2.9 +1 CWE-59