Vulnerabilities > CVE-2021-29158 - Incorrect Authorization vulnerability in Sonatype Nexus Repository Manager 3 3.25.1

047910
CVSS 4.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
sonatype
CWE-863

Summary

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.

Vulnerable Configurations

Part Description Count
Application
Sonatype
1

Common Weakness Enumeration (CWE)