CVE-2020-11415

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1

published April 27, 2020

CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.4th percentile
Published
2020-04-27T14:35Z
EPSS history
Timeline
  • 27 APR 14:35Z
    An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1
    cvelistv5