← All advisories

Critical severity9.8CISA KEVOSV Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2019-7238

CVE-2019-7238

Description

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

Affected products

3

Sonatype/NexusOSV
Range: release-3.3.0-01, release-3.4.0-02, release-3.5.0-02
Sonatype/Nexus Repository Manager OSS/Pro2 versions
cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*range: >=3.0.0,<3.15.0
- (no CPE)range: <3.15.0

Patches

Vulnerability mechanics

References

2

support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019nvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

0

No linked articles in our index yet.