← All advisories

Unrated severityCISA KEVOSV Advisory· Published Mar 21, 2019· Updated Oct 21, 2025

CVE-2019-7238

CVE-2019-7238

Description

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

Affected products

2

Sonatype/NexusOSV
Range: release-3.3.0-01, release-3.4.0-02, release-3.5.0-02
Sonatype/Nexus Repositoryllm-fuzzy
Range: <3.15.0

Patches

Vulnerability mechanics

References

1

support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.