Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component’s internal network port.

Synacktiv, which found the bug, says it can lead to a full cluster takeover. There is no fix and no CVE. The firm says it reported the flaw to Argo CD’s maintainers in

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Adversarial Fashion Makes a Statement on AI Panopticon

Adversarial Fashion Makes a Statement on AI Panopticon Source: Hacker News

Read More

Hook, hold, harvest and hide: Meta’s alleged strategy laid out in first week

Hook, hold, harvest and hide: Meta’s alleged strategy laid out in first week Source: Hacker News

Read More

The Onboarding Password Mistake That Creates Unnecessary Risk

The Onboarding Password Mistake That Creates Unnecessary Risk Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all delivered within a

Read More