All CVE records

CVE-2019-7238 — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

CISA KEV listed Added December 10, 2021 Remediate by June 10, 2022

Description

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7238

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer