CVE-2022-41354
- Source
- https://cve.org/CVERecord?id=CVE-2022-41354
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41354.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-41354
- Aliases
- Published
- 2023-03-27T00:00:00Z
- Modified
- 2026-08-12T03:51:48.353568601Z
- Summary
- [none]
- Details
-
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.
- Database specific
{ "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41354.json" }- References
Affected packages
Git / github.com/argoproj/argo-cd
Affected ranges
- Type
- GIT
- Repo
- https://github.com/argoproj/argo-cd
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0.5.0" }, { "fixed": "2.4.28" }, { "introduced": "2.5.0" }, { "fixed": "2.5.16" }, { "introduced": "2.6.0" }, { "fixed": "2.6.7" } ], "source": "CPE_RANGE", "cpe": "cpe:2.3:a:linuxfoundation:argo-cd:*:*:*:*:*:*:*:*" }
Affected versions
v0.*
v0.5.0
v0.5.1
v0.5.2
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.8.0
v2.*
v2.4.0
v2.4.0-rc1
v2.4.0-rc2
v2.4.0-rc3
v2.4.0-rc4
v2.4.0-rc5
v2.4.1
v2.4.10
v2.4.11
v2.4.12
v2.4.13
v2.4.14
v2.4.15
v2.4.16
v2.4.17
v2.4.18
v2.4.19
v2.4.2
v2.4.20
v2.4.21
v2.4.22
v2.4.23
v2.4.24
v2.4.25
v2.4.26
v2.4.27
v2.4.3
v2.4.4
v2.4.5
v2.4.6
v2.4.7
v2.4.8
v2.4.9
v2.5.0
v2.5.1
v2.5.10
v2.5.11
v2.5.12
v2.5.13
v2.5.14
v2.5.15
v2.5.2
v2.5.3
v2.5.4
v2.5.5
v2.5.6
v2.5.7
v2.5.8
v2.5.9
v2.6.0
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6