Design/Logic Flaw

2021-07-3014:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.

CPENameOperatorVersion
replicated_classicge2.10.0
replicated_classicle2.32.3
replicated_classicge2.33.0
replicated_classicle2.36.0
replicated_classicge2.37.0
replicated_classicle2.37.1
replicated_classicge2.38.0
replicated_classicle2.38.5
replicated_classicge2.39.0
replicated_classicle2.39.3

Name	Operator	Version
replicated_classic	ge	2.10.0
replicated_classic	le	2.32.3
replicated_classic	ge	2.33.0
replicated_classic	le	2.36.0
replicated_classic	ge	2.37.0
replicated_classic	le	2.37.1
replicated_classic	ge	2.38.0
replicated_classic	le	2.38.5
replicated_classic	ge	2.39.0
replicated_classic	le	2.39.3