CVE-2024-13484

Name of the Vulnerable Software and Affected Versions openshift-gitops-operator-container (affected versions not specified) ArgoCD (affected versions not specified)

Description A flaw was found in the software, allowing a namespace to create a rogue PrometheusRule when the openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.

Recommendations For openshift-gitops-operator-container, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ArgoCD, at the moment, there is no information about a newer version that contains a fix for this vulnerability.