CVE-2020-11576
EUVD-2021-259308.04.2020, 18:15
Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned 401 for an existing username and 404 otherwise.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| argoproj | argo_cd | 1.5.0 |
𝑥
= Vulnerable software versions
References