6547 matches found
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
Code injection
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
CVE-2020-24622
CVE-2020-24622 affects Sonatype Nexus Repository 3.26.1. An admin user can disclose S3 secret keys due to an information-disclosure vulnerability. The NVD entry lists CVSSv3.1 base score 4.9 (Medium) with network attack and low complexity; confidentiality impact is high while other impacts are no...
PT-2020-15773
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository version 3.26.1 Description The issue allows an admin user to expose an S3 secret key. Recommendations For Sonatype Nexus Repository version 3.26.1, update to a version that contains a fix for this issue to prevent...
CVE-2020-24622: Insufficiently Protected Credentials
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-48588)
Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the web-based management interface ...
Sonatype Nexus Repository Manager Unauthorized Access Vulnerability
Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype NXRM OSS/Pro versions prior to 3.26.0. An attacker could exploit the vulnerability to access...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
Improper access control
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
CVE-2020-15868
Affected product: Sonatype Nexus Repository Manager OSS/Pro prior to 3.26.0. Vulnerability: Incorrect Access Control (root cause). Impact: authenticated? no; the CNVD entry states an attacker could access unauthorized content with a specially crafted request. CVSS details: CVSS v3.1 base 7.5 (HIG...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
PT-2020-14675
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager OSS/Pro versions prior to 3.26.0 Description The issue is related to Incorrect Access Control in the Sonatype Nexus Repository Manager OSS/Pro. Recommendations For versions prior to 3.26.0, update to version...
CVE-2020-15868: Undefined Security Weakness
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2021-32036)
Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...