Red Hat Security Advisory

RHSA-2022:5187

Red Hat OpenShift GitOps security update

Released 2022-06-24 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2022-13080 CVE-2022-31035 · GHSA-h4w9-6x78-8vrj

MEDIUM 43

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00986 Published 2022-06-27 Fixed in 2.1.16, 2.2.10 +2 CWE-79

TI-2022-13079 CVE-2022-31034 · GHSA-2m7h-86qq-fp4v

MEDIUM 40

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00964 Published 2022-06-27 Fixed in 2.1.16, 2.2.10 +2 CWE-330

TI-2022-13061 CVE-2022-31016 · GHSA-jhqp-vf4w-rpwq

LOW 31

Argo CD is a declarative continuous deployment for Kubernetes.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00901 Published 2022-06-25 Fixed in 2.1.16, 2.2.10 +2 CWE-400

TI-2022-13081 CVE-2022-31036 · GHSA-q4w5-4gq2-98vm

LOW 22

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00891 Published 2022-06-27 Fixed in 2.1.16, 2.2.10 +2 CWE-20