virus logo Intrusion Prevention

Nexus.Repository.Manager.Unauthorized.Remote.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a Remote Code Execution vulnerability in Nexus Repository Manager 3.
The vulnerability is due to improper authentication in the vulnerable application when handling a malicious request. A remote attacker may be able exploit this to execute arbitrary code on vulnerable machines.

affected-products-logoAffected Products

Nexus Repository Manager 3.6.2 OSS/Pro versions up to and including 3.14.0

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2020-11-26 16.969
Modified
 Sig Added
2019-06-06 14.627
Modified
 Severity:high:critical
2019-04-05 14.587
Modified
 Default_action:pass:drop
2019-03-14 14.573
New
ID 47582
Created Mar 14, 2019
Updated Nov 25, 2020
CVE ID
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Known Exploited Yes
Exploit Prediction Score 94.38%
Default Action drop
Active
Affected OS Windows, Linux, MacOS
Affected App Other
Profile Type Permission/Privilege/Access Control