Description Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. Remediation References CVE-2018-16620 Related Vulnerabilities Drupal Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-13670) WordPress Plugin Youtube Feeder Cross-Site Request Forgery (2.0.1) Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840) Nexus Repository Manager Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-16530) Django Improper Authentication Vulnerability (CVE-2021-44420) Severity High Classification CVE-2018-16620 CWE-863 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities