medium4.9
CVE-2020-11415
An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1.
Impact
An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonatype | Nexus Repository Manager | from 2.0 before 2.14.17 from 3.0 before 3.22.1 |