CVE-2024-21662

Summary

CVE-2024-21662 is a vulnerability affecting Argo CD, a Kubernetes continuous delivery tool. Versions 2.8.13, 2.9.9, and 2.10.4 are susceptible to this flaw, which allows an attacker to bypass rate limits and brute force protection by exploiting the weak cache-based mechanism used by the application. This vulnerability can be combined with other weaknesses to target the default admin account, undermining a previous patch designed to protect against brute force attacks (CVE-2020-8827). The brute force protection in Argo CD relies on a cache that has a limit of 1000 entries, and an attacker can overflow this cache by bombarding it with login attempts for different users. As a result, the admin account's failed attempts are pushed out, resetting the rate limit for that account. This vulnerability poses a significant danger as it enables attackers to perform accelerated brute force attacks, specifically targeting the default admin account.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.