CVE-2017-17717

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-17

Last modified

2024-09-16

Weaknesses

CWE-327

Affected products

• Nexus Repository Manager (Sonatype)

References

• http://openwall.com/lists/oss-security/2017/12/17/3