QwikSec

Security Database

CVE

CWE

Training

CVE-2020-10590

Published: Jul 28, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://blog.replicated.com

x_refsource_MISC

https://gradle.com/enterprise/releases/2019.5/#changes

x_refsource_CONFIRM

https://www.replicated.com/security/advisories/CVE-2020-10590

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.