CVE-2019-9630

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

CVE-2019-9630

CVE-2019-9630 affects Sonatype Nexus Repository Manager (NXRM) prior to 3.17.0. The root cause is a weak default configuration that allows an unauthenticated user to read repository files and images. The vulnerability enables exposure of artifacts and metadata stored in the repository due to perm...