| Package | Affected versions | Patched versions |
|---|---|---|
| nexus repository manager | ≥ 2.0, < 2.14.17≥ 3.0, < 3.22.1 | 2.14.173.22.1 |
An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free