{"cvss":9.8,"datePublished":"2021-12-10","dateUpdated":"2021-12-10","description":"Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.","dueDate":"2022-06-10","id":"CVE-2019-7238","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7238","product":"Nexus Repository Manager","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","vendor":"Sonatype"}