CVE-2020-8826

Publication date

2020-04-08 19:38:54

Family

mitre

State

PUBLISHED

Description

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication.