CVE-2017-17717

Impact

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://openwall.com/lists/oss-security/2017/12/17/3
• http://openwall.com/lists/oss-security/2017/12/17/3