CVE-2020-8826 | BDVDB-2026-133751 Detail

Description#

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/argoproj/argo/releases
https://www.soluble.ai/blog/argo-cves-2020
https://argoproj.github.io/argo-cd/security_considerations/

Exploit#

No public exploit known

History#

Version 12020-04-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.