Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability - CVE-2017-17717 - Vulnerability Database

Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability - CVE-2017-17717

Critical

Reference: CVE-2017-17717

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-17717

Title: Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability

Overview:

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.