Junglewise Threat Intelligence

CVE-2022-31034: GO-2022-0497 - Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

CVE-2022-31034 · Severity: low · CVSS 3.1 · Published 2024-08-21

Technologies: github.com/argoproj/argo-cd (Go), github.com/argoproj/argo-cd/v2 (Go). Vendors: Go.

Executive brief

Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

Affected products

  • Go github.com/argoproj/argo-cd
  • Go github.com/argoproj/argo-cd/v2

Related threats