CVE-2019-9629

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

CVE-2019-9629

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

CVE-2019-9630

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

Design/Logic Flaw

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

CVE-2019-9630

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

CVE-2019-9629

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

PT-2019-19765

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.17.0 Description The issue concerns a weak default configuration that grants any unauthenticated user read permissions on repository files and images. Recommendations For versions prior to...

CVE-2019-9630: Incorrect Default Permissions

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

PT-2019-19764

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.17.0 Description The issue concerns the establishment of a default administrator user with weak defaults, specifically fixed credentials. Recommendations For versions prior to 3.17.0, updat...

CVE-2019-9629: Improper Authentication

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

VulnCheck KEV: CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...

CVE-2019-11629

Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS...

CVE-2019-11629

Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS...

CVE-2019-11629

Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS...

CVE-2019-11629

CVE-2019-11629 concerns Nexus Repository Manager 2.x prior to 2.14.13, where a cross-site scripting (XSS) vulnerability exists in the web application. Description in the provided documents states that the vulnerability allows XSS but does not detail specific affected components beyond the product...

CVE-2019-11629: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS...

PT-2019-12436

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions 2.x through 2.14.12 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker injects malicious code into a website, allowing them to steal user data or ta...

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2019-13256)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A cross-site scripting vulnerability exists in Sonatype NXRM, which stems from a WEB application that fails to properly validate client-side data and can be exploited by an attacker to execute client-side code...

TomTom: Anonymous user login to Nexus Repository Manager

Hello, By default the Nexus Repository Manager has two login users one is admin and the other is anonymous. The default password for the user "admin" is admin123 The default password for the user "anonymous" is anonymous On your Nexus Repository Manager the password for the user admin has been...

Insecure Access Controls

Sonatype Nexus Repository Manager is use an insecure access controls. An unauthenticated user can craft requests in a way that can allow execution of arbitrary code and programs on the host system...