[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNdcSKDMvr-D-ZzxzrVO1_PpAflr2mqF3Uv5teEKeYi0":3,"g5a-risk:CVE-2020-25688":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":47,"weaknesses":55,"weaknessesCount":70,"isActivelyExploited":71,"cisaInfo":25,"otxData":25,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":107,"notableEvents":108},"CVE-2020-25688","What is CVE-2020-25688?","A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all installations using the same certificates. If an attacker could observe network traffic internal to a cluster, they could use the private key to decode API requests that should be protected by TLS sessions, potentially obtaining information they would not otherwise be able to. These certificates are not used for service authentication, so no opportunity for impersonation or active MITM attacks were made possible.","A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the so...","2020-11-23T22:15:12.18","2020-12-08T01:01:04.76",3.5,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED",null,2.1,1.4,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":22,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":22,"Authentication":33,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:A\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",2.7,5.1,2.9,0.00251,[38,38,38,38,38,38,38],"Low",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","advanced_cluster_management_for_kubernetes","*","cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:*:*:*:*:*:*:*:*",1,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1892551","Red Hat",[53,54],"Issue Tracking","Vendor Advisory",[56,64],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-321","Use of Hard-coded Cryptographic Key","The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.","","Draft","Variant","Simple",{"id":65,"name":66,"description":67,"extendedDescription":68,"status":61,"abstraction":69,"structure":63},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Base",2,false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2020-25688? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-25688, a low severity cyber security vulnerability from 2020. A flaw was found in rhacm versions before 2.0.5 and before 2...","CVE-2020-25688, CVE-2020-25688 vulnerability, CVE-2020-25688 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, redhat security, advanced_cluster_management_for_kubernetes vulnerability","\u002Fwhat-is\u002Fcve-2020-25688",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-25688","Cybersecurity","CVE-2020-25688, CVE-2020-25688 vulnerability, CVE-2020-25688 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":25,"Negate":25,"Nodes":100},[101],{"Operator":102,"Negate":25,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":105,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":106,"VersionEndIncluding":25},"78C66909-F927-460E-9B2F-45E32949B4F2","2.0.5",[],[],{"lastModified":11,"cacheTime":110,"version":31},1792264671991,{"score":112,"band":113,"action":114,"scoredAt":115},16,"Info","Track","2026-10-16T06:49:57.880086+00:00"]