CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2019-03-21

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2021-12-10, action due 2022-06-10: Apply updates per vendor instructions.

Affected products

• Nexus Repository Manager (Sonatype)

References

• https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Con…
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7238