CVE-2014-0792

Опубликовано: 17 янв. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.

Ссылки

http://www.sonatype.org/advisories/archive/2014-01-13-Nexus
Patch
Vendor Advisory
https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist
https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability
Patch
Vendor Advisory
http://www.sonatype.org/advisories/archive/2014-01-13-Nexus
Patch
Vendor Advisory
https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist
https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sonatype:nexus:1.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.4:1:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.2:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.7.0:04:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.7.0:05:*:*:*:*:*:*

cpe:2.3:a:sonatype:nexus:2.7.0:06:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03052

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2014-0792

ubuntu

около 12 лет назад

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.

GHSA-6hg7-jppj-fgrc

github

больше 3 лет назад

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.

EPSS

Процентиль: 86%

0.03052

Низкий

7.5 High

CVSS2

Дефекты

CWE-94