Affected by GO-2024-2898 and 3 other vulnerabilities

GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

cmpserver

package

v2.11.1 Latest Latest Go to latest Published: May 21, 2024 License: Apache-2.0 Imports: 22 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type ArgoCDCMPServer struct {
	// contains filtered or unexported fields
}

ArgoCDCMPServer is the config management plugin server implementation

func NewServer(initConstants plugin.CMPServerInitConstants) (*ArgoCDCMPServer, error)

NewServer returns a new instance of the Argo CD config management plugin server

func (a *ArgoCDCMPServer) CreateGRPC() (*grpc.Server, error)

CreateGRPC creates new configured grpc server

func (a *ArgoCDCMPServer) Run()

func (a *ArgoCDCMPServer) Shutdown(address string)

Path	Synopsis
apiclient
plugin