mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
751 B
751 B
CVE-2020-11415
Description
An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.
POC
Reference
- https://support.sonatype.com/hc/en-us/articles/360045360854
- https://support.sonatype.com/hc/en-us/articles/360045360854
Github
No PoCs found on GitHub currently.