Malicious Kubernetes Helm Charts can be used to steal sensitive information from Argo CD deployments
Go back Apiiro's Security Research team has uncovered a major software supply chain 0-day vulnerability ( CVE-2022-24348 ) in Argo CD, the popular open source Continuous Delivery platform, which enables attackers to access sensitive information such as secrets, passwords, and API keys. Argo CD manages and orchestrates the execution and monitoring of application deployment post-integration.
https://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments/