util

Jun 7, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Jun 6, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 31, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 30, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 21, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 21, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 18, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Changes in this version

+ func Wait(timeout uint, f func(chan<- bool)) bool

May 17, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 11, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 3, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

May 1, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Apr 24, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Apr 23, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Mar 29, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Changes in this version

+ func Close(c Closer)

+ func HashPassword(password string) (string, error)

+ func VerifyPassword(password, hashedPassword string) (valid, stale bool)

+ type ArgoCDSettings struct

+ LocalUsers map[string]string

+ type BcryptPasswordHasher struct

+ Cost int

+ func (h BcryptPasswordHasher) HashPassword(password string) (string, error)

+ func (h BcryptPasswordHasher) VerifyPassword(password, hashedPassword string) bool

+ type Closer interface

+ Close func() error

+ type ConfigManager struct

+ func NewConfigManager(clientset kubernetes.Interface, namespace, configMapName string) (mgr *ConfigManager)

+ func (mgr *ConfigManager) GetSettings() (ArgoCDSettings, error)

+ func (mgr *ConfigManager) SetRootUserCredentials(username string, password string) error

+ type DummyPasswordHasher struct

+ func (h DummyPasswordHasher) HashPassword(password string) (string, error)

+ func (h DummyPasswordHasher) VerifyPassword(password, hashedPassword string) bool

+ type KeyLock struct

+ func NewKeyLock() *KeyLock

+ func (keyLock *KeyLock) Lock(key string)

+ func (keyLock *KeyLock) Unlock(key string)

+ type PasswordHasher interface

+ HashPassword func(string) (string, error)

+ VerifyPassword func(string, string) bool

Mar 12, 2018 GO-2022-0388 +4 more

  GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

  GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

  GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows