CVE-2020-10590

State: Published
Severity: Not scored
Published: Jul 28, 2021
Updated: Aug 4, 2024
Reserved: Mar 15, 2020

Description

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://blog.replicated.com/
https://gradle.com/enterprise/releases/2019.5/#changes
https://www.replicated.com/security/advisories/CVE-2020-10590

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.