{"id":"CVE-2021-23135","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-23135","generatedAt":"2026-10-27T23:43:25.590Z","title":"Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs.","description":"Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.","published":"2021-05-12T23:15:08.000Z","lastModified":"2026-06-17T03:38:20.000Z","status":"Modified","sourceIdentifier":"psirt@paloaltonetworks.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-497","CWE-209"],"affected":["argoproj/argo cd"],"epss":{"score":0.00232,"percentile":0.13914,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fp89-h8pj-8894","tags":["Third Party Advisory"],"source":"psirt@paloaltonetworks.com"},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fp89-h8pj-8894","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-23135","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}