CVE-2021-23135

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497CWE-209

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-231366.5Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command CeCVE-2021-231387.8WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely exeCVE-2021-231397.5A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI progCVE-2021-23148.1Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Supported versions that areCVE-2021-231408.8Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised CommandCVE-2021-231467.5An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This CVE-2021-231476.8Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access CVE-2021-23155.4Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versions that are affected CVE-2021-231504.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.CVE-2021-231527.8Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalatCVE-2021-231547.8In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are thenCVE-2021-231556.8Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Ce