Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Argo CD leaked secret data into error messages and logs on invalid edits via UI
Vulnerability Description
Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Vulnerability Type
将系统数据暴露到未授权控制的范围
Vulnerability Title
Argo 信息泄露漏洞
Vulnerability Description
Argo是一款开源的容器本机工作流引擎。 Argo CD 存在安全漏洞。该漏洞源于程序的Web UI中的系统数据暴露于未经授权的Control Sphere漏洞中，攻击者可以将泄漏的机密数据导致泄漏到Web UI错误消息和日志中。以下产品及版本受到影响：Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14。
CVSS Information
N/A
Vulnerability Type
N/A