PT-2024-5332 · Argo Cd · Argo Cd

Clownandbox · Published 2024-07-18 · Updated 2025-01-09 · CVE-2024-41666

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.6.0 through 2.11.6 Argo CD versions 2.7.0 through 2.10.15 Argo CD versions 2.8.0 through 2.9.20

Description The issue is related to the Argo CD web terminal, which allows users to get a shell inside a running pod. When the administrator enables this function and grants permission to the user p, role:myrole, exec, create, */*, allow, even if the user revokes this permission, the user can still perform operations in the container, as long as the user keeps the terminal view open for a long time. This may lead to the leakage of sensitive information. The estimated number of potentially affected devices worldwide is not available.

Recommendations For Argo CD versions 2.6.0 through 2.11.6, update to version 2.11.7 or later. For Argo CD versions 2.7.0 through 2.10.15, update to version 2.10.16 or later. For Argo CD versions 2.8.0 through 2.9.20, update to version 2.9.21 or later. As a temporary workaround, consider disabling the web terminal function until a patch is available. Restrict access to the web terminal to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2024-05960

BIT-ARGO-CD-2024-41666

CVE-2024-41666

GHSA-V8WX-V5JQ-QHHW

GO-2024-3006

Affected Products

Argo Cd

References · 18

• 🔥 https://github.com/argoproj/argo-cd/security/advisories/GHSA-v8wx-v5jq-qhhw · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41666.json · Exploit
• 🔥 https://drive.google.com/file/d/1Fynj5Sho8Lf8CETqsNXZyPKlTDdmgJuN/view?usp=sharing · Exploit
• https://github.com/argoproj/argo-cd/commit/e96f32d233504101ddac028a5bf8117433d333d6 · Patch
• https://github.com/argoproj/argo-cd/commit/ef535230d8bd8ad7b18aab1ea1063e9751d348c4 · Patch
• https://github.com/argoproj/argo-cd/commit/05edb2a9ca48f0f10608c1b49fbb0cf7164f6476 · Patch
• https://osv.dev/vulnerability/GHSA-v8wx-v5jq-qhhw · Vendor Advisory
• https://osv.dev/vulnerability/BIT-argo-cd-2024-41666 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41666 · Security Note
• https://bdu.fstec.ru/vul/2024-05960 · Security Note
• https://osv.dev/vulnerability/GO-2024-3006 · Vendor Advisory
• https://github.com/argoproj/argo-cd · Note
• https://t.me/cvenotify/87368 · Telegram Post
• https://argo-cd.readthedocs.io/en/stable/operator-manual/web_based_terminal/#:~:text=4%2C%20Argo%20CD%20has%20a,This%20is%20a%20powerful%20privilege. · Note