CVE-2014-0792 in Sonatype Nexus
Résumé (Anglaise)
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.
Réserver
03/01/2014
Divulgation
17/01/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 66110 | Sonatype Nexus élévation de privilèges | 94 | Non défini | Correctif officiel | CVE-2014-0792 |