CVE-2020-8827

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures

published April 8, 2020

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02212 · 82.5th percentile
Published
2020-04-08T19:43Z
EPSS history
Timeline
  • 08 APR 19:43Z
    As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures
    cvelistv5