{"metadata": {"vulnerability": "CVE-2024-41666", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-07-18T15:21:47.484Z", "date_only": false, "value": "2024-07-18T15:21:47.484Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-41666", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-24T10:49:21Z", "date_only": false, "value": "2024-07-24T10:49:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-v8wx-v5jq-qhhw", "record": "CVE-2024-41666", "field": "creation_timestamp", "uuid": "b020aec4-62eb-4c46-808b-d0131d117f1f", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-v8wx-v5jq-qhhw"}, {"timestamp": "2024-07-24T17:16:37.730Z", "date_only": false, "value": "2024-07-24T17:16:37.730Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-41666", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-24T17:16:37.730Z", "date_only": false, "value": "2024-07-24T17:16:37.730Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-41666", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-24T18:05:21.749Z", "date_only": false, "value": "2024-07-24T18:05:21.749595Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-41666", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-24T18:05:21.749Z", "date_only": false, "value": "2024-07-24T18:05:21.749595Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41666", "record": "FKIE_CVE-2024-41666", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-24T18:15:05Z", "date_only": false, "value": "2024-07-24T18:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V8WX-V5JQ-QHHW", "record": "GHSA-V8WX-V5JQ-QHHW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-24T18:15:05.090Z", "date_only": false, "value": "2024-07-24T18:15:05.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41666", "record": "FKIE_CVE-2024-41666", "field": "published"}, {"timestamp": "2024-07-24T20:49:54Z", "date_only": false, "value": "2024-07-24T20:49:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1582", "record": "CVE-2024-41666", "field": "creation_timestamp", "uuid": "7e1010df-b235-4c8a-83cd-2326fdcb204e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41666 - \"Argo CD Web Terminal Persistent Authority Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-41666 \nPublished : July 24, 2024, 6:15 p.m. | 26\u00a0minutes ago \nDescription : Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to the user `p, role:myrole, exec, create, */*, allow`, even if the user revokes this permission, the user can still perform operations in the container, as long as the user keeps the terminal view open for a long time. Although the token expiration and revocation of the user are fixed, however, the fix does not address the situation of revocation of only user `p, role:myrole, exec, create, */*, allow` permissions, which may still lead to the leakage of sensitive information. A patch for this vulnerability has been released in Argo CD versions 2.11.7, 2.10.16, and 2.9.21. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1582"}, {"timestamp": "2024-07-24T20:54:02Z", "date_only": false, "value": "2024-07-24T20:54:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V8WX-V5JQ-QHHW", "record": "GHSA-V8WX-V5JQ-QHHW", "field": "published"}, {"timestamp": "2024-08-02T04:46:52.923Z", "date_only": false, "value": "2024-08-02T04:46:52.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-41666", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-07T14:24:24Z", "date_only": false, "value": "2024-08-07T14:24:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V8WX-V5JQ-QHHW", "record": "GHSA-V8WX-V5JQ-QHHW", "field": "modified"}, {"timestamp": "2024-08-12T21:02:57.505Z", "date_only": false, "value": "2024-08-12T21:02:57.505Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-41666", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-12T21:02:57.505Z", "date_only": false, "value": "2024-08-12T21:02:57.505Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-41666", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:48:00.747Z", "date_only": false, "value": "2026-06-17T07:48:00.747", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41666", "record": "FKIE_CVE-2024-41666", "field": "lastModified"}]}