CVE-2021-42718 describes an information disclosure vulnerability in Replicated Classic versions prior to 2.53.1. Authenticated users with Admin Console access could retrieve sensitive data, including application secrets, by accessing container definitions with environment variables via the Admin Console API on port 8800. This vulnerability has a CVSS score of 4.9 (Medium), indicating a network attack vector with low complexity, requiring high privileges to achieve high confidentiality impact. The affected product reached End-of-Life on December 31, 2024. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE. The issue was discovered and patched in 2021, and the CVE status was updated in January 2025.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.53.0, < 2.53.1CPE match | cpe:2.3:a:replicated:replicated_classic:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.