Executive brief
Attack on Kubernetes via Misconfigured Argo Workflows
Affected products
- Go github.com/argoproj/argo-workflows
Junglewise Threat Intelligence
Attack on Kubernetes via Misconfigured Argo Workflows
Severity: info ยท Published 2021-08-02
Technologies: github.com/argoproj/argo-workflows (Go). Vendors: Go.
Related threats
- Argo Workflows privilege escalation via ArtifactGC PodSpecPatch
- Argo Workflows missing authorization in Sync ConfigMap Provider
- Argo Workflows authorization bypass in templateReferencing Strict mode
- Argo Workflows plaintext credential leak in workflow logs
- Argo Workflows denial of service in Webhook Interceptor