CVE

CVE-2019-7238

Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

Sonatype · Nexus Repository Manager

Date added (CISA)

2021-12-10

Remediation due

2022-06-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.