CVE-2022-41354

MediumCVSS 4.3

Published: 27/03/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

46th percentile - higher than 46% of all known CVEs

Summary

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications. The problem stems from missing proper access controls.

Risk Assessment

The risk is that an attacker can gain information about applications managed by Argo CD, which may facilitate further attacks on the environment.

Recommendation

It is recommended to immediately upgrade Argo CD to version 2.4.13 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.