CVE-2019-7238

KEV

Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

View CVE record →

Vendor / Project: Sonatype
Product: Nexus Repository Manager
Date added: Dec 10, 2021
Due date: Jun 10, 2022
Known ransomware use: Unknown
CWEs: —

Description

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7238