Code injection

2021-11-0213:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account.

CPENameOperatorVersion
nexus_repository_managerge3.0.0
nexus_repository_managerle3.35.0

CPE	Name	Operator	Version
	nexus_repository_manager	ge	3.0.0
	nexus_repository_manager	le	3.35.0

References

support.sonatype.com

support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021