CVE-2020-8828 | BDVDB-2026-133753 Detail

Description#

As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster or logs, this issue could be abused for privilege escalation, as Argo has privileged roles. A malicious insider is the most realistic threat, but pod names are not meant to be kept secret and could wind up just about anywhere.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-04-08Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.