Incident Library

Organisation

Cycode

Cycode · cycode

1 case · 2024

Root cause Software defect
Component Argo CD
Contributing factor Excessive blast radiusCredential in configurationUnreviewed defaults
Symptom Unauthorised access or a foreign workload

Cases

  1. IL-0065 Any pod could take over the cluster by rewriting Argo CD's unauthenticated Redis cache (CVE-2024-31989)Cycode · 2024

    Root cause Software defect