Description (CNA)
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| argoproj / Argo CD | affected 3.2.0 before 3.2.11; affected 3.3.0 before 3.3.9 |
CWE
CWE-212
References
ADP enrichment
No English description supplied.
A flaw was found in Argo CD. The ServerSideDiff feature allows for the reading of cleartext Kubernetes Secret data. This vulnerability could lead to information disclosure, potentially exposing sensitive configuration details within the Kubernetes environment.