Description

Argo CD has an information disclosure vulnerability that allows an unauthenticated attacker to access to sensitive settings.

Remediation

Update to the latest version of Argo CD.

References

GitHub Security Advisory

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9652)

NodeBB Arbitrary JSON File Read (CVE-2021-43788)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44947)

MediaWiki Other Vulnerability (CVE-2020-27621)

Severity

Medium

Classification

CVE-2024-37152 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Known Vulnerabilities