1. Home
  2. CVE Database
  3. CVE-2021-23135
MEDIUM · 5.9

CVE-2021-23135

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD...

Vulnerability Description

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArgoprojArgo Cd>= 1.7.0, < 1.7.14

Related Weaknesses (CWE)

CWE-209CWE-497

References

FAQ

What is CVE-2021-23135?

CVE-2021-23135 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD...

How severe is CVE-2021-23135?

CVE-2021-23135 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-23135?

Check the references section above for vendor advisories and patch information. Affected products include: Argoproj Argo Cd.