Skip to main content

Improper Privilege Management

CVE-2024-41666

Medium
5.1/10

Summary

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. When the administrator enables this function and grants permission to the user "p, role:myrole, exec, create, */*, allow", even if the user revokes this permission, the user can still perform operations in the container, as long as the user keeps the terminal view open for a long time. Although the token expiration and revocation of the user are fixed, however, the fix does not address the situation of revocation of only user "p, role:myrole, exec, create, */*, allow" permissions, which may still lead to the leakage of sensitive information. This issue affects github.com/argoproj/argo-cd versions 2.6.0-rc1 through 2.9.20, 2.10.0-rc1 through 2.10.15, 2.11.0-rc1 through 2.11.6, and 2.12.0-rc1 through 2.12.0-rc4.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • NONE

CWE-269 - Improper Privilege Management

An effective privilege management infrastructure provides valid users with required access and privileges across heterogeneous technology environments. An application with a faulty privilege management infrastructure allows higher than authorized privileges or enables privilege escalation. This can lead to security incidents such as system infiltration, data breach, and complete system takeover.

References

Advisory Timeline

  • Published