UpHeron
All vulnerabilities

Servers and applications

CVE-2020-11415

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.

Severity
Medium 4.9
Published
27 Apr 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.14.17, 3.22.1
Sources
NVD

Affected software

SoftwareAffected versions
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager
  • From 2.0 before 2.14.17
  • From 3.0 before 3.22.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-11415
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-11415