PT-2014-4440 · Sonatype · Sonatype Nexus+1

Publicado 2014-04-01 · Atualizado 2014-04-01 · CVE-2014-2034

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sonatype Nexus versions 2.4.0 through 2.7.1

Description The issue allows attackers to create arbitrary user accounts via an unauthenticated execution path.

Recommendations For versions 2.4.0 through 2.7.1, update to a version outside of the affected range to resolve the issue.

Correção

Identificadores relacionados

CVE-2014-2034

Produtos afetados

Nexus Repository Manager

Sonatype Nexus

Referências · 6

• https://support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API · Aviso do Fabricante
• http://sonatype.org/advisories/archive/2014-03-03-Nexus · Aviso do Fabricante
• http://secunia.com/advisories/57142 · Aviso do Fabricante
• http://osvdb.org/104049 · Nota
• http://securityfocus.com/bid/65956 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2034 · Nota de Segurança