UpHeron
All vulnerabilities

Servers and applications

CVE-2022-31034

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in parameters in Oauth2/OIDC login flows. In each case, using a relatively-predictable (time-based) seed in a…

Severity
High 8.1
Published
27 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.1.16
Sources
NVD

Affected software

SoftwareAffected versions
Argo CDServers and applications · cpe:a:argoproj:argo_cd
  • From 0.11.0 before 2.1.16
  • Version 2.2.9
  • Version 2.3.4
  • Version 2.4.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31034
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31034