CVE-2017-17717

Critical

Published: 17/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Weak password encryption may lead to unauthorized access to the system, posing a serious threat to the organization's data security.

It is recommended to upgrade to the latest version of Sonatype Nexus Repository Manager to eliminate this vulnerability.

Original NVD description (English source)

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.