UpHeron
All vulnerabilities

Servers and applications

CVE-2024-5764

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an…

Severity
Medium 5.9
Published
23 Oct 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.73.0
Sources
NVD

Affected software

SoftwareAffected versions
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager
  • From 3.0.0 before 3.73.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-5764
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-5764