CyberSec.Space Logo
CVEブラウザに戻る

CVE-2017-17717

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1660%
EPSS Percentile2.71th
Published2017年12月17日
Last Modified2026年5月13日

Vulnerability Description

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Affected Platforms (CPE)

📦
Sonatype

Nexus Repository Manager

<= 2.14.5

References & Advisories

🔗 http://openwall.com/lists/oss-security/2017/12/17/3
🔗 http://openwall.com/lists/oss-security/2017/12/17/3

関連する脆弱性情報

CVE-2019-72389.8

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

CVE-2019-96299.8

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials).

CVE-2020-114448.8

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.

CVE-2020-117538.8

An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropr...