Description (CNA)
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sonatype / Nexus Repository 3 | affected 3.19.0 before 3.95.0 |
CWE
CWE-843
References
- https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html
- https://support.sonatype.com/hc/en-us/articles/53157550694675
ADP enrichment
No English description supplied.
No references supplied.