CVE-2019-7238: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Published Mar 21, 2019
·Updated
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
Other sources
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
— CISA
Affected Software
3 affected components
Sonatype Nexus Repository Manager
Sonatype Nexus<3.15.0
Sonatype Nexus Repository Manager>=3.0.0<3.15.0
Event History
Mar 21, 2019
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityAffected Software
Dec 10, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is CVE-2019-7238?
CVE-2019-7238 is the identifier for the Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability.
2
What is the severity of CVE-2019-7238?
CVE-2019-7238 has a severity rating of 9.8 (critical).
3
How does CVE-2019-7238 impact Sonatype Nexus Repository Manager?
CVE-2019-7238 allows for remote code execution in Sonatype Nexus Repository Manager before version 3.15.0 due to an incorrect access control vulnerability.
4
What software is affected by CVE-2019-7238?
Sonatype Nexus Repository Manager versions before 3.15.0 are affected by CVE-2019-7238.
5
How can I fix CVE-2019-7238?
To fix CVE-2019-7238, you should upgrade your Sonatype Nexus Repository Manager to version 3.15.0 or later.