6547 matches found
CVE-2019-9630
Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...
CVE-2019-9629
Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...
CVE-2019-9630
Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...
CVE-2019-9630
Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...
CVE-2019-9630
CVE-2019-9630 affects Sonatype Nexus Repository Manager (NXRM) prior to 3.17.0. The root cause is a weak default configuration that allows an unauthenticated user to read repository files and images. The vulnerability enables exposure of artifacts and metadata stored in the repository due to perm...
CVE-2019-9629
CVE-2019-9629 affects Sonatype Nexus Repository Manager prior to version 3.17.0, where the default administrator account uses weak default credentials (admin/admin123). This configuration flaw allows an attacker to gain administrator privileges and take over the repository manager. Multiple conne...
CVE-2019-9629
Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...
PT-2019-19765
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.17.0 Description The issue concerns a weak default configuration that grants any unauthenticated user read permissions on repository files and images. Recommendations For versions prior to...
Cisco Data Center Network Manager 11.1(1) Remote Code Execution
Authentication Bypass and Arbitrary File Upload leading to remote code execution on Cisco Data Center Network Manager Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/ ==========================================================================...
Cisco Data Center Network Manager 11.1(1) Remote Code Execution Exploit
Cisco Data Center Network Manager DCNM versions 11.11 and below suffer from authentication bypass, arbitrary file upload, arbitrary file download, and information disclosure vulnerabilities. Authentication Bypass and Arbitrary File Upload leading to remote code execution on Cisco Data Center...
PT-2019-19764
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.17.0 Description The issue concerns the establishment of a default administrator user with weak defaults, specifically fixed credentials. Recommendations For versions prior to 3.17.0, updat...
CVE-2019-9629: Improper Authentication
Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...
CVE-2019-9630: Incorrect Default Permissions
Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...
Cisco Nexus 9000 Series Fabric Switches Access Control Error Vulnerability
Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. An access control error vulnerability exists in the process of establishing fabric infrastructure VLAN links in Cisco Nexus 9000 Series Fabric Switches in ACI mode. An attacker could exploit this...
CVE-2019-1890
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...
CVE-2019-1890
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...
Security feature bypass
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...
CVE-2019-1890 Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...