CVE-2014-2034

概要

参考情報

• secunia.com/advisories/57142 · Vendor Advisory
• osvdb.org/104049
• securityfocus.com/bid/65956
• sonatype.org/advisories/archive/2014-03-03-Nexus · Vendor Advisory
• support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API · Vendor Advisory

nexus のその他の脆弱性

• CVE-2020-24622中 4.9In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.
• CVE-2020-11444高 8.8Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
• CVE-2020-10204高 7.2Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
• CVE-2020-10203中 4.8Sonatype Nexus Repository before 3.21.2 allows XSS.
• CVE-2020-10199高 8.8悪用確認済み（CISA KEV）Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).