An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.