PT-2023-27219 · Argo Cd · Argo Cd

Zhlu32 · Published 2023-08-23 · Updated 2024-08-21 · CVE-2023-40025

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.6.0 through 2.6.13 Argo CD versions 2.7.0 through 2.7.11 Argo CD versions 2.8.0

Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The issue arises from open web terminal sessions not expiring, allowing users to send any websocket messages even if the token has already expired. This can lead to users viewing sensitive information even after they should have been logged out.

Recommendations For Argo CD versions 2.6.0 through 2.6.13, update to version 2.6.14. For Argo CD versions 2.7.0 through 2.7.11, update to version 2.7.12. For Argo CD version 2.8.0, update to version 2.8.1. As a temporary workaround, consider disabling the web-based terminal or defining RBAC rules to it.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2023-40025

GHSA-C8XW-VJGF-94HR

GO-2023-2018

Affected Products

Argo Cd

References · 9

• 🔥 https://github.com/argoproj/argo-cd/security/advisories/GHSA-c8xw-vjgf-94hr · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40025.json · Exploit
• https://github.com/argoproj/argo-cd/commit/e047efa8f9518c54d00d2e4493b64bc4dba98478 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-40025 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40025 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-2018 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c8xw-vjgf-94hr · Vendor Advisory
• https://github.com/argoproj/argo-cd · Note
• https://t.me/cibsecurity/69089 · Telegram Post