Database/Container, Kubernetes & orchestration
Argo CD: Cluster secrets stored in the last-applied-configuration annotation are readable by anyone with get access on…
CVE-2023-40029Container, Kubernetes & orchestrationcurated
Impact
Cluster secrets stored in the last-applied-configuration annotation are readable by anyone with get access on the secret
Who can reach it
Cluster user with namespace access to argocd
What to do
Rolling Argo CD upgrade; rotate every cluster credential Argo CD holds
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.