Unscored CVE-2020-8826 EUVD-2020-29671GHSA-g4gx-6fjc-vv49

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever…

Published Apr 8, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication.

References

https://github.com/argoproj/argo/releases
https://www.soluble.ai/blog/argo-cves-2020
https://argoproj.github.io/argo-cd/security_considerations/