CVE-2019-7238 Sonatype Nexus Repository Manager
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
- Added
- 2021-12-10
- Federal patch deadline
- 2022-06-10
- Ransomware use
- not known