CVE-2020-8826

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication.
References
Configurations

Configuration 1

cpe:2.3:a:linuxfoundation:argo_continuous_delivery:*:*:*:*:*:kubernetes:*:*

Information

Published : 2020-04-08 08:15

Updated : 2020-04-14 04:07


NVD link : CVE-2020-8826

Mitre link : CVE-2020-8826

Products Affected
No products.
CWE
CWE-384

Session Fixation