CVE-2020-10590

CVE-2020-10590 affects Replicated Classic 2.x. The issue is an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on a Replicated Classic server could retrieve the TLS keypair (certif...

CVE-2021-43058

CVE-2021-43058 is an open redirect in Replicated Classic before 2.53.1, where a crafted URL can spoof users by redirecting them to an untrusted site. Root cause: improper URL handling enabling redirects. Impact: spoofing via user interaction (clicking the malicious link) with partial confidential...