Description
A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)
Sqlite CVE-2021-36690 Vulnerability (CVE-2021-36690)
WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)
Liferay Portal Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-4581)
Squid Missing Authentication for Critical Function Vulnerability (CVE-2019-12524)