CVE-2020-11415

Publication date

2020-04-27 14:35:41

Family

mitre

State

PUBLISHED

Description

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.