Nexus Repository Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2021-42568 - Vulnerability Database

Nexus Repository Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2021-42568

Medium

Reference: CVE-2021-42568

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-42568

Title: Nexus Repository Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account.