Medium WID-SEC-2026-1987 1 CVE

Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jun 17, 2026 · Updated Jun 17, 2026 · de-DE

Vendor: Sonatype Product: Nexus Repository Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen.

Product

Sonatype Nexus Repository Manager ist ein Verwaltungstool für Software-Bestandteile.

Vulnerabilities 1

Medium 5.9

CVE-2026-10741

Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Sonatype Nexus Repository Manager

Jun 17, 2026

Revision history

2026-06-17 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-06-17
https://github.com/advisories/GHSA-QQCV-FJFG-8RP6
Sonatype Nexus Repository 3.93.0 Release Notes vom 2026-06-17
https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html