VULNERABILITY INTELLIGENCE

CVE-2021-23135

CVSS score5.9 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-05-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Description

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-497
  • nvd@nist.gov: CWE-209

Primary references