AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2019-7238.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSCISA known exploitedAdded Dec 10, 2021
RECORD STATUSAwaiting NVD dataModified Dec 10, 2021

Disclosure summary

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

CISA remediation guidance

Apply updates per vendor instructions.

Original records & references

PUBLISHED 2021-12-10T00:00:00-05:00
MODIFIED 2021-12-10T00:00:00-05:00
INGESTED 2026-10-06T11:42:59-04:00