Lucene search
Veracode Vulnerability DatabaseVERACODE:25076HistoryApr 28, 2020 - 2:40 a.m.
Information Disclosure
2020-04-2802:40:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
28.4%
nexus-coreui-plugin is vulnerable to information disclosure. The vulnerability exists as users with admin privileges could retrieve the LDAP server’s system’s credentials, as configured in nxrm, in plaintext.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nexus-coreui-plugin | le | 3.21.1-01 | |
| nexus-ldap-realm-plugin | le | 2.14.16-01 | |
| nexus-ldap-realm-plugin | le | 2.5.1-01 |
Related
osv
osv
CVE-2020-11415
2020-04-27 15:15:12
cvelist
cvelist
CVE-2020-11415
2020-04-27 14:35:41
nvd
nvd
CVE-2020-11415
2020-04-27 15:15:12
cve
cve
CVE-2020-11415
2020-04-27 15:15:12
prion
prion
Default credentials
2020-04-27 15:15:00