Information Disclosure

2022-03-2407:58:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github.com/argoproj/argo-cd

information disclosure

vulnerability

access controls

admin-level

sensitive information

EPSS

0.001

Percentile

48.7%

JSON

github.com/argoproj/argo-cd is vulnerable to information disclosure. The vulnerability exists in application resource APIs because the access controls are not properly handled which allows an attacker to escalate their privileges to admin-level and access the sensitive information.