Database/Container, Kubernetes & orchestration
Argo CD: Tokens keep working after the user account is disabled
CVE-2021-26921Container, Kubernetes & orchestrationcurated
Impact
Tokens keep working after the user account is disabled; offboarding does not revoke access
Who can reach it
A former user with a cached token
What to do
Rolling Argo CD upgrade; force-rotate all tokens
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.