exploitDog

CVE-2021-29158

Опубликовано: 23 апр. 2021

Источник: nvd

CVSS3: 4.9

CVSS2: 4

EPSS Низкий

Описание

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.

Ссылки

https://support.sonatype.com/hc/en-us/articles/1500006126462
Patch
Vendor Advisory
https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base
Vendor Advisory
https://support.sonatype.com/hc/en-us/articles/1500006126462
Patch
Vendor Advisory
https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sonatype:nexus_repository_manager_3:*:*:*:*:pro:*:*:*

Версия до 3.30.0 (включая)

EPSS

Процентиль: 45%

0.00224

Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

GHSA-gf6v-2xhw-h825

CVSS3: 4.9

github

больше 3 лет назад

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.

EPSS

Процентиль: 45%

0.00224

Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-863