Nexus Repository Manager · Sandworm Watch

Dec 10, 2021high

CVE-2019-7238: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2019-7238EPSS 76.5%Nexus Repository ManagerSonatype

CISA KEV ↗ · unattributed attribution