Lucene search
+L

6 matches found

NVD
NVD
•added 2014/04/01 3:25 a.m.•47 views

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

7.5CVSS6.8AI score0.02062EPSS
SaveExploits1References5
Prion
Prion
•added 2014/04/01 3:25 a.m.•29 views

Path traversal

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

7.5CVSS7.3AI score0.02062EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2014/04/01 12:00 a.m.•42 views

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

6.8AI score0.02062EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/01 12:00 a.m.•8 views

CVE-2014-2034: Undefined Security Weakness

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

7.5CVSS6.1AI score0.02062EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2014/04/01 12:00 a.m.•5 views

PT-2014-4440

Name of the Vulnerable Software and Affected Versions Sonatype Nexus versions 2.4.0 through 2.7.1 Description The issue allows attackers to create arbitrary user accounts via an unauthenticated execution path. Recommendations For versions 2.4.0 through 2.7.1, update to a version outside of the...

7.5CVSS0.02062EPSS
SaveExploits1References6
CVE
CVE
•added 2014/04/01 12:00 a.m.•67 views

CVE-2014-2034

CVE-2014-2034 affects Sonatype Nexus OSS/Pro 2.4.0–2.7.1, where an unauthenticated execution path enables attackers to create arbitrary user accounts. The vulnerability is described as a security bypass that could allow account creation without authentication. Public sources within connected data...

7.5CVSS6.9AI score0.02062EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder