SCA: security update for github.com/argoproj/argo-workflows/v3 (GHSA-prqf-xr2j-xf65)

high Tenable Cloud Security Plugin ID 417697

Description

Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client`

See Also

https://github.com/advisories/GHSA-prqf-xr2j-xf65

Plugin Details

Severity: High

ID: 417697

Version: Revision 1.2

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 1/29/2025

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/18/2021

Vulnerability Publication Date: 8/18/2021

Reference Information

cwe: CWE-285