CVE Vulnerabilities

CVE-2014-2034

Published: Apr 01, 2014 | Modified: Apr 01, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to an unauthenticated execution path.

Affected Software

Name Vendor Start Version End Version
Nexus Sonatype 2.4.0 2.4.0
Nexus Sonatype 2.4.0 2.4.0
Nexus Sonatype 2.5.0 2.5.0
Nexus Sonatype 2.5.0 2.5.0
Nexus Sonatype 2.6.0 2.6.0
Nexus Sonatype 2.6.0 2.6.0
Nexus Sonatype 2.6.1 2.6.1
Nexus Sonatype 2.6.1 2.6.1
Nexus Sonatype 2.6.2 2.6.2
Nexus Sonatype 2.6.2 2.6.2
Nexus Sonatype 2.6.3 2.6.3
Nexus Sonatype 2.6.3 2.6.3
Nexus Sonatype 2.6.4 2.6.4
Nexus Sonatype 2.6.4 2.6.4
Nexus Sonatype 2.6.5 2.6.5
Nexus Sonatype 2.7.0 2.7.0
Nexus Sonatype 2.7.0 2.7.0
Nexus Sonatype 2.7.1 2.7.1
Nexus Sonatype 2.7.1 2.7.1

References