漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation
Vulnerability Description
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates on applications managed by other tenants. This leads to cross-namespace privilege escalation, impacting application integrity through unauthorized application updates.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Vulnerability Type
CWE-1220
Vulnerability Title
Red Hat OpenShift GitOps 安全漏洞
Vulnerability Description
Red Hat OpenShift GitOps是美国红帽（Red Hat）公司的一个自动化部署服务。 Red Hat OpenShift GitOps存在安全漏洞，该漏洞源于验证不足，可能导致攻击者绕过命名空间边界，触发跨命名空间权限提升，影响应用程序完整性。
CVSS Information
N/A
Vulnerability Type
N/A