CVE-2020-10590

Published: Jul 30, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.

Affected (8)

Products: Replicated: Replicated Classic

Replicated

1 product

Replicated Classic

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Replicated Replicated Classic	From 2.10.0 to 2.32.3
Replicated Replicated Classic	From 2.33.0 to 2.36.0
Replicated Replicated Classic	From 2.37.0 to 2.37.1
Replicated Replicated Classic	From 2.38.0 to 2.38.5
Replicated Replicated Classic	From 2.39.0 to 2.39.3
Replicated Replicated Classic	From 2.40.0 to 2.40.3
Replicated Replicated Classic	From 2.42.0 to 2.42.3
Replicated Replicated Classic	Version 2.41.0