CVE-2020-10590
Estado: ModificadaAlta (7.5)—
Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.31%
- Percentil entre todas las CVEs puntuadas: 70
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-10590",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2021-07-30T14:15:12.930",
"references": [
{
"url": "https://blog.replicated.com",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://gradle.com/enterprise/releases/2019.5/#changes",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.replicated.com/security/advisories/CVE-2020-10590",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://blog.replicated.com",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://gradle.com/enterprise/releases/2019.5/#changes",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.replicated.com/security/advisories/CVE-2020-10590",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console."
},
{
"lang": "es",
"value": "Replicated Classic versiones 2.x, presentan una API asegurada inapropiadamente que expone datos confidenciales de la configuración de la Consola de Administración Replicada. Un atacante con acceso de red al puerto de la Consola de Administración (8800) en el servidor de Replicated Classic podría recuperar el par de claves TLS (Cert y Key) usado para configurar la Consola de Administración"
}
],
"lastModified": "2026-06-17T02:48:03.320",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A13F1249-8DFC-4CCB-8E39-5237958CA278",
"versionEndIncluding": "2.32.3",
"versionStartIncluding": "2.10.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAD962E0-AD59-45C2-9AA2-825CD1589522",
"versionEndIncluding": "2.36.0",
"versionStartIncluding": "2.33.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10023122-0F02-4D4A-B413-5227EE939BB7",
"versionEndIncluding": "2.37.1",
"versionStartIncluding": "2.37.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADFC23B4-835F-4ACC-91E2-76752F14E7A3",
"versionEndIncluding": "2.38.5",
"versionStartIncluding": "2.38.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10D63E7B-B00E-4F2B-AF6D-DAA6EAC614F9",
"versionEndIncluding": "2.39.3",
"versionStartIncluding": "2.39.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EC5AF21-62BD-4883-8941-7690D7EEF64F",
"versionEndIncluding": "2.40.3",
"versionStartIncluding": "2.40.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "304928C9-4462-43C1-99E3-7C01101E4DAB",
"versionEndIncluding": "2.42.3",
"versionStartIncluding": "2.42.0"
},
{
"criteria": "cpe:2.3:a:replicated:replicated_classic:2.41.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0350B1B8-C397-4CE1-B9E7-73D93B80DA6B"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}