NetSight
IP …
high7.5

CVE-2019-9630

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images.

Impact

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images.

Affected products

VendorProductAffected versions
SonatypeNexus Repository Manager
before 3.17.0

Weakness classification

CWE-276

References