CVE-2014-2034: High severity Sonatype Nexus vulnerability
Published Apr 1, 2014
·Updated
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."
Affected Software
19 affected components
Sonatype Nexus=2.4.0
Sonatype Nexus=2.4.0
Sonatype Nexus=2.5.0
Sonatype Nexus=2.5.0
Sonatype Nexus=2.6.0
Sonatype Nexus=2.6.0
Sonatype Nexus=2.6.1
Sonatype Nexus=2.6.1
Sonatype Nexus=2.6.2
Sonatype Nexus=2.6.2
Sonatype Nexus=2.6.3
Sonatype Nexus=2.6.3
Sonatype Nexus=2.6.4
Sonatype Nexus=2.6.4
Sonatype Nexus=2.6.5
Sonatype Nexus=2.7.0
Sonatype Nexus=2.7.0
Sonatype Nexus=2.7.1
Sonatype Nexus=2.7.1
Event History
Apr 1, 2014
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:25 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2034?
CVE-2014-2034 is classified as a moderate severity vulnerability due to its potential for unauthorized user account creation.
2
How do I fix CVE-2014-2034?
To fix CVE-2014-2034, you should upgrade to a version of Sonatype Nexus that is 2.8.0 or later.
3
What versions of Sonatype Nexus are affected by CVE-2014-2034?
CVE-2014-2034 affects Sonatype Nexus OSS and Pro versions 2.4.0 through 2.7.1.
4
What type of attacks does CVE-2014-2034 allow?
CVE-2014-2034 allows attackers to create arbitrary user accounts, potentially compromising the system.
5
Is there a workaround for CVE-2014-2034?
There are no known workarounds for CVE-2014-2034; upgrading to a patched version is recommended.