CVE-2020-10590

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration

published July 28, 2021

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01312 · 70.5th percentile
Published
2021-07-28T11:38Z
EPSS history
Timeline
  • 28 JUL 11:38Z
    Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration
    cvelistv5