Description

Argo CD has an information disclosure vulnerability that allows an unauthenticated attacker to access to sensitive settings.

Remediation

Update to the latest version of Argo CD.

References

GitHub Security Advisory

Related Vulnerabilities

Joomla Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2019-11358)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29526)

phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)

Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14232)

MySQL CVE-2024-21201 Vulnerability (CVE-2024-21201)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Known Vulnerabilities CWE-287 CVE-2024-37152