[NEU] [hoch] Sonatype Nexus Repository Manager: Mehrere Schwachstellen
Multiple high-severity Sonatype Nexus Repository Manager flaws—including SQL injection and admin privilege escalation—threaten CI/CD supply-chain integrity, a core concern for any organisation with centralised artefact management.
Summary written by editorial AI · Source link below
Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um erweiterte Berechtigungen – einschließlich Administratorrechte – zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder SQL-Injection- und Cross-Site-Scripting-Angriffe durchzuführen.
Editorial Analysis
Nexus Repository Manager is central to many enterprise build pipelines; admin takeover via SQL injection could enable silent artefact tampering with downstream impact across all deployed software.
Upgrade Nexus Repository Manager to the patched version, audit admin account activity, and validate checksums of recently published artefacts.
Vulnerabilities in a widely used software artefact repository could let attackers silently tamper with internal build pipelines—patch priority is high.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at CERT-Bund (BSI) in a new tab.
More from the Vulnerabilities Desk
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks3d
- QNAP says hackers breaching NAS devices in Plex2Shell attacks3d
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time3d
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen3d
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen3d