Description (CNA)
Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| argoproj / argo-rollouts | affected 0 through 1.10.0 |
CWE
CWE-306
References
- https://github.com/argoproj/argo-rollouts/issues/4747
- https://github.com/argoproj/argo-rollouts
- https://github.com/argoproj/argo-rollouts/blob/4e6a2798688e22868340d9871a3c8d78371f1568/server/server.go
- https://www.vulncheck.com/advisories/argo-rollouts-dashboard-unauthenticated-mutating-operations
ADP enrichment
No English description supplied.
No references supplied.