Argo CD Image Updater proxy setting command injection allows command execution
Attackers can run commands and steal account details in the OpenShift GitOps deploy tool.
Summary
Argo CD Image Updater passes the proxy address of an SSH Git repository unsanitized into a shell command. An attacker who can set a malicious proxy value can run commands and access credentials held by Image Updater. The argocd-image-updater package in Red Hat OpenShift GitOps is affected.
Affected when
- SSH Git repository with a proxy URL configured
- Attacker able to set the proxy value
What to do
Upstream argocd-image-updater versions below 1.4.1 are affected. Check that the version you run is newer than this, and read the Red Hat advisory for the fixed version.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen