org.sonatype.nexus.plugins:nexus-capabilities-model (2.7.0-m1), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.7.0-m1) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.7.0-m1)

org.sonatype.nexus:nexus-core MAVEN version 2.7.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.7.0-m1 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-05), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.0-05) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.0-05 -...

Weak Implementation Of Password Cipher

nexus-ldap-common contains a weak implementation of password cipher. It stores the LDAP bind password using the PBE Key Spec with only 23 iterations and a hard-coded password. This allows the cipher to be easily defeated...