{"metadata": {"vulnerability": "CVE-2023-40029", "count": 43, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 33}}, "data": [{"timestamp": "2023-08-08T13:46:25.244Z", "date_only": false, "value": "2023-08-08T13:46:25.244Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-40029", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-08-30T00:00:00Z", "date_only": false, "value": "2023-08-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-08-30T00:00:00Z", "date_only": false, "value": "2023-08-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-09-05T00:00:00Z", "date_only": false, "value": "2023-09-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-05T00:00:00Z", "date_only": false, "value": "2023-09-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-07T22:11:56.361Z", "date_only": false, "value": "2023-09-07T22:11:56.361Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-40029", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-07T22:11:56.361Z", "date_only": false, "value": "2023-09-07T22:11:56.361Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-40029", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-07T23:15:00Z", "date_only": false, "value": "2023-09-07T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-40029", "record": "GSD-2023-40029", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-07T23:15:09Z", "date_only": false, "value": "2023-09-07T23:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FWR2-64VR-XV9M", "record": "GHSA-FWR2-64VR-XV9M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-07T23:15:09.763Z", "date_only": false, "value": "2023-09-07T23:15:09.763", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40029", "record": "FKIE_CVE-2023-40029", "field": "published"}, {"timestamp": "2023-09-08T02:19:34Z", "date_only": false, "value": "2023-09-08T02:19:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/70118", "record": "CVE-2023-40029", "field": "creation_timestamp", "uuid": "2f430c6f-d179-4ad6-a715-93c1a6785871", "content": "\u203c CVE-2023-40029 \u203c\n\nArgo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. As a result, the full secret body is stored in`kubectl.kubernetes.io/last-applied-configuration` annotation. pull request #7139 introduced the ability to manage cluster labels and annotations. Since clusters are stored as secrets it also exposes the `kubectl.kubernetes.io/last-applied-configuration` annotation which includes full secret body. In order to view the cluster annotations via the Argo CD API, the user must have `clusters, get` RBAC access. **Note:** In many cases, cluster secrets do not contain any actually-secret information. But sometimes, as in bearer-token auth, the contents might be very sensitive. The bug has been patched in versions 2.8.3, 2.7.14, and 2.6.15. Users are advised to upgrade. Users unable to upgrade should update/deploy cluster secret with `server-side-apply` flag which does not use or rely on `kubectl.kubernetes.io/last-applied-configuration` annotation. Note: annotation for existing secrets will require manual removal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70118"}, {"timestamp": "2023-09-08T13:00:32Z", "date_only": false, "value": "2023-09-08T13:00:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-08T13:00:32Z", "date_only": false, "value": "2023-09-08T13:00:32+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-09-08T13:00:32Z", "date_only": false, "value": "2023-09-08T13:00:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-08T13:09:59Z", "date_only": false, "value": "2023-09-08T13:09:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-08T13:09:59Z", "date_only": false, "value": "2023-09-08T13:09:59+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-09-08T13:09:59Z", "date_only": false, "value": "2023-09-08T13:09:59+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-10T22:00:00Z", "date_only": false, "value": "2023-09-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-10T22:00:00Z", "date_only": false, "value": "2023-09-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-10T22:00:00Z", "date_only": false, "value": "2023-09-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-11T12:59:30Z", "date_only": false, "value": "2023-09-11T12:59:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FWR2-64VR-XV9M", "record": "GHSA-FWR2-64VR-XV9M", "field": "published"}, {"timestamp": "2023-09-11T12:59:30Z", "date_only": false, "value": "2023-09-11T12:59:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FWR2-64VR-XV9M", "record": "GHSA-FWR2-64VR-XV9M", "field": "modified"}, {"timestamp": "2023-09-17T22:00:00Z", "date_only": false, "value": "2023-09-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-17T22:00:00Z", "date_only": false, "value": "2023-09-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-27T14:31:00Z", "date_only": false, "value": "2023-10-27T14:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-40029", "record": "GSD-2023-40029", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:43.620Z", "date_only": false, "value": "2023-12-13T01:20:43.620608Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-40029", "record": "GSD-2023-40029", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T18:24:54.665Z", "date_only": false, "value": "2024-08-02T18:24:54.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-40029", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:11.159Z", "date_only": false, "value": "2024-08-15T17:58:11.159+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2296", "record": "WID-SEC-W-2023-2296", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-26T18:21:03.707Z", "date_only": false, "value": "2024-09-26T18:21:03.707832Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-40029", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-26T18:21:03.707Z", "date_only": false, "value": "2024-09-26T18:21:03.707832Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40029", "record": "FKIE_CVE-2023-40029", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-26T18:22:28.890Z", "date_only": false, "value": "2024-09-26T18:22:28.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-40029", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-26T18:22:28.890Z", "date_only": false, "value": "2024-09-26T18:22:28.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-40029", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-25T10:00:05Z", "date_only": false, "value": "2025-01-25T10:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/F-fOrjgp3Mr3VOE2BBhgFMlAqu7uJ17avQ8Wad5LrkBGLSw", "record": "CVE-2023-40029", "field": "creation_timestamp", "uuid": "40dd872f-c664-4958-aa5c-01da5a822681"}, {"timestamp": "2025-03-03T21:02:34.256Z", "date_only": false, "value": "2025-03-03T21:02:34.256175Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljitws6krt2g", "record": "CVE-2023-40029", "field": "creation_timestamp", "uuid": "de3cc05c-ca50-4625-9e2a-c84d6caa2424", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljitws6krt2g"}, {"timestamp": "2026-03-18T02:25:02Z", "date_only": false, "value": "2026-03-18T02:25:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T02:25:02Z", "date_only": false, "value": "2026-03-18T02:25:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-18T02:25:02Z", "date_only": false, "value": "2026-03-18T02:25:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:5029", "record": "RHSA-2023:5029", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-18T02:25:03Z", "date_only": false, "value": "2026-03-18T02:25:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T02:25:03Z", "date_only": false, "value": "2026-03-18T02:25:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-18T02:25:03Z", "date_only": false, "value": "2026-03-18T02:25:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:5030", "record": "RHSA-2023:5030", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T06:15:50.033Z", "date_only": false, "value": "2026-06-17T06:15:50.033", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40029", "record": "FKIE_CVE-2023-40029", "field": "lastModified"}]}