VDB
CVE-2024-31989
CVE-2024-31989
PUBLISHED
CVSS 9 CRITICAL
ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache
EPSS 1.48% · 72.1th percentile
Risk Scores
CVSS 3.1
9
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
1.48%
72.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | argo-cd | 0 |
| Bitnami | argo-cd | 0, 0, 0 |
Timeline
- Jan 21, 1970 Security Advisory
- May 21, 2024 CVE Published
- May 21, 2024 PoC Published
- May 22, 2024 EPSS Score
- May 22, 2024 PoC Published
- Jul 24, 2024 PoC Published
- Oct 4, 2024 Coalition ESS Score
- Jan 21, 2025 Coalition ESS Score
- Mar 17, 2025 EPSS Score
- Mar 20, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
References
- https://github.com/argoproj/argo-cd/commit/2de0ceade243039c120c28374016c04ff9590d1d url
- https://github.com/argoproj/argo-cd/commit/35a7d6c7fa1534aceba763d6a68697f36c12e678 url
- https://github.com/argoproj/argo-cd/commit/4e2fe302c3352a0012ecbe7f03476b0e07f7fc6c url
- https://github.com/argoproj/argo-cd/commit/53570cbd143bced49d4376d6e31bd9c7bd2659ff url
- https://github.com/argoproj/argo-cd/commit/6ef7b62a0f67e74b4aac2aee31c98ae49dd95d12 url
- https://github.com/argoproj/argo-cd/commit/9552034a80070a93a161bfa330359585f3b85f07 url
- https://github.com/argoproj/argo-cd/commit/bdd889d43969ba738ddd15e1f674d27964048994 url
- https://github.com/argoproj/argo-cd/commit/f1a449e83ee73f8f14d441563b6a31b504f8d8b0 url
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-9766-5277-j5hr url
- https://nvd.nist.gov/vuln/detail/CVE-2024-31989 url