Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2021-23135

Argo CD leaked secret data into error messages and logs on invalid edits via UI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Argo CD Argo CD

  • 1.8 to < 1.8.7affected
  • 1.7 to < 1.7.14affected

References