Description

Argo CD has an information disclosure vulnerability that allows an unauthenticated attacker to access to sensitive settings.

Remediation

Update to the latest version of Argo CD.

References

GitHub Security Advisory

Related Vulnerabilities

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-26084)

Handlebars Other Vulnerability (CVE-2021-23383)

Plone CMS Resource Management Errors Vulnerability (CVE-2013-4188)

Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-28336)

b2evolution Other Vulnerability (CVE-2006-6197)

Severity

Medium

Classification

CVE-2024-37152 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Known Vulnerabilities