CVE-2021-3557

Name of the Vulnerable Software and Affected Versions argocd (affected versions not specified)

Description A flaw was found in argocd, allowing any unprivileged user to deploy argocd in their namespace. With the created ServiceAccount argocd-argocd-server, the unprivileged user can read all resources of the cluster, including all secrets, which might enable privilege escalations. The highest threat from this issue is to data confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.